Hidden Database Secret Exfiltrated Through Search Bar SQL Injection

A security write-up details a SQL injection vulnerability in a web application's product search feature. The vulnerability occurs because user input is directly embedded into a raw SQL query without any sanitization. An attacker can use a UNION SELECT attack to extract data from database tables unrelated to the product catalogue, such as user credentials. The article explains that the final objective is to retrieve a specific secret from a table named 'internal_secrets', which is not accessible through normal search results.