Can we perform UNION based SQL injection in order to figure out which column has which kind of datatype irrespective of the DBMS used on backend?
We can UNION columns of different data types in the majority of SQL databases like MySQL, SQLite etc. There are only few DBMS like Microsoft Access and Db2 which don’t give Unioned columns output if the columns have different data types.
S…