💉 02 — SQL Injection

Easy Medium Hard
Easy Medium Hard
0/3 solved

🔍 Medium — UNION-Based Extraction

Search for products using raw SQL. Extract user passwords via UNION SELECT injection.

Try ' UNION SELECT 1,username,password FROM users -- to extract user credentials from the users table.