LABHARD
Not solved

Lab: SQL injection attack, listing the database contents on non-Oracle databases

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application's response so you can use a UNION attack to retrieve data from other tables. The application uses a database with an information_schema to store metadata. To solve the lab, retrieve the administrator credentials and log in.