SQL Injection Series PHP + Mysql manual... - Programmer Sought

Use union select null, null, null is the same. information_schema mysql greater than 5.0 of the library version of the database and stores all information mysql table structure, it is possible using information_schema library was quickly injected.

How the SQL UNION Operator Deals with NULL Values

So three NULLs were reduced to just one NULL. This is the same as doing the following: Select null union distinct select null union distinct select null Here are examples that use data from a database.

inurl index php db information schema as fgbl where 5072 5072...

SQL-инъекции' union select null, null, null -- / Хабр

?id=1' union select null,null,table_name,null from information_schema.tables Это стало возможным благодаря добавлению таблицы information_schema в MySQL 5.0+ и по ее наличию также можно косвенно определить версию используемой БД.

Статья - SQL-injection, начало - UNION BASED - Codeby.net

sql - How null values are treated in union/union all in... - Stack Overflow

select null union all select null. Outputs select null union all select null. the two rows are considered duplicates of each other because the null values in first column are considered not distinct... i.e. same. And by definition UNION returns only one row from a set of duplicate rows.

sql injection "union select null" - CodeProject

Union select null, null, null, null, null, null, null from information_schema.tables. for a small database containing three tables. When you do a UNION query, both SELECT statements of the query must have the same number of columns.

SQL Injection | HackTricks | HackTricks

Шпаргалка по SQL инъекциям | DefconRU

php mysqli database column cannot be null FIX - YouTube