> For the complete documentation index, see [llms.txt](https://www.xtormin.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.xtormin.com/labs/portswigger-academy/sql-injection.md).

# SQL Injection

| Laboratorio                                                                                         | Solución                                                                                                                                                                                                                      |
| --------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Vulnerabilidad de inyección SQL en la cláusula WHERE que permite la extracción de datos ocultos     | [Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data](/labs/portswigger-academy/sql-injection/lab-sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data.md)            |
| Vulnerabilidad de inyección SQL que permite eludir el inicio de sesión                              | [Lab: SQL injection vulnerability allowing login bypass](/labs/portswigger-academy/sql-injection/lab-sql-injection-vulnerability-allowing-login-bypass.md)                                                                    |
| Ataque de inyección SQL mediante UNION, determinando el número de columnas que devuelve la consulta | [Lab: SQL injection UNION attack, determining the number of columns returned by the query](/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query.md) |
| Ataque de inyección SQL mediante UNION, identificando una columna que contenga texto                | [Lab: SQL injection UNION attack, finding a column containing text](/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-finding-a-column-containing-text.md)                                               |
| Ataque de inyección SQL mediante UNION, extrayendo datos de otras tablas                            | [Lab: SQL injection UNION attack, retrieving data from other tables](/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-retrieving-data-from-other-tables.md)                                             |
| Ataque de inyección SQL mediante UNION, extrayendo múltiples valores en una sola columna            | [Lab: SQL injection UNION attack, retrieving multiple values in a single column](/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-retrieving-multiple-values-in-a-single-column.md)                     |