union 3 SQL injection with filter bypass via XML encoding Jun 11, 2026 SQL injection UNION attack: finding a column containing text Jun 10, 2026 SQL injection UNION attack: determining the number of columns Jun 9, 2026