< Back





5. SQL injection UNION attack, retrieving data from other tables

Finally using a UNION attack to do something interesting, we use the UNION attack to leak data from
other tables. In this case, we manage to leak all the usernames and passwords in the target
database. We then use the administator's password to log in as the administrator.


Solution