Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft
Summary: PortSwigger's lab presents a SQL injection vulnerability in a product category filter, which can be exploited with a UNION attack to return results from an injected query. Solving the lab requires determining the number of columns returned and which contain text data, then using a payload to display the database version string for MySQL and Microsoft databases.
Why it matters: A category filter that accepts injected UNION queries hands an attacker the database version string, the first step toward enumerating schema and data on MySQL and Microsoft back ends.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026