Sql Injection Challenge 5 Security Shepherd

SQL Injection Challenge 5 in OWASP Security Shepherd involves exploiting a vulnerable coupon code input field to retrieve a VIP code via UNION-based SQL injection. The challenge, which stems from unsanitized user input in a SELECT query, requires injecting payloads like ' UNION SELECT coupon_code FROM coupons WHERE '1'='1

Input: 5' AND '1'='2 Query: SELECT * FROM users WHERE user_id = '5' AND '1'='2' (Always false) -> Response: "Not found" Sql Injection Challenge 5 Security Shepherd

Challenge overview

The application code likely constructs a query like this: SQL Injection Challenge 5 in OWASP Security Shepherd