A researcher discovered and exploited a SQL injection vulnerability in the University of Cambridge's Fitzwilliam Museum search functionality, demonstrating column enumeration via ORDER BY, UNION SELECT attacks, and successful extraction of database version, user credentials, and database name.
A bug bounty hunter discovered a union-based SQL injection vulnerability in a private company's web application by identifying vulnerable parameters and methodically determining the number of columns (11) before extracting database version, user information, table schemas, and column names using UNION SELECT queries and information_schema enumeration.
A researcher discovered a SQL injection vulnerability in an affiliate form's email parameter, demonstrating information extraction via UNION-based injection and then escalating to arbitrary file read/write using MySQL's LOAD_FILE and INTO OUTFILE functions to exfiltrate /etc/passwd and create files on the server.