This lab contains a SQL injection vulnerability in its stock check feature. The results from the query are returned in the application's response, so you can use a UNION attack to retrieve data from other tables. However, the database uses a Web Application Firewall (WAF) to protect against SQL injection. To solve the lab, construct a SQL injection attack to bypass the filter using XML entities, retrieve credentials from the users table, and log in.