Is union based mysql injection able to read files outside database?
Can files outside database which are not part of any tables in database be read via union based SQL injection? For eg
http://xyz.com/fetch?id=3
Consider id parameter is used at server side by cursor library to execute mysql query and no sa… Continue reading Is union based mysql injection able to read files outside database?