Querying the database type and version on MySQL and Microsoft

• Can use a UNION attack to retrieve the results from an injected query.
• Verify that the query is returning two columns, both of which contain text, using a payload like the following in the category parameter:

'+UNION+SELECT+'abc','def'+FROM+dual--

• After verifying the category,
  • Use the following payload to display the database version: '+UNION+SELECT+BANNER,+NULL+FROM+v$version--