NetSPI/SQLInjectionWiki

Data types for union based injections

JacobReynolds opened this issue · 0 comments

Add a description for unions that require specific data types. We try to use null to be agnostic, but this is not fool proof.

Example:
SELECT "mysql","test" UNION SELECT @@version,null
The null might need to be a varchar.

https://sqlwiki.netspi.com/tab/injectionTypes/unionBased