Lab: SQL injection UNION attack, retrieving multiple values in a single column

This lab contains a SQL injection vulnerability in the product category filter. The results from the query are returned in the application's response, so you can use a UNION attack to retrieve data from other tables. The database contains a users table with columns username and password. To solve the lab, perform a SQL injection UNION attack that concatenates multiple values into a single text column to retrieve all credentials and log in as administrator.