bscp 2 SQL injection UNION attack, determining the number of columns returned by the query Jun 5, 2026 SQL injection vulnerability in WHERE clause allowing retrieval of hidden data May 29, 2026