{keyword}' Union All Select Null,null,null,null,null,null,null,null From Msysaccessobjects-- Udhz (Tested - BLUEPRINT)

A system table in Access that contains information about database objects. If successful, the attacker can see if they have access to system metadata [1, 4].

If you are looking to learn about this for security research or to protect your own applications, here is a quick guide on what’s happening and how to prevent it. What this payload does: A system table in Access that contains information

This is the gold standard. It treats user input as literal text, not executable code [6]. A system table in Access that contains information

Matches the number of columns in the original table. Attackers use NULL to figure out how many columns they need to match without causing a data type error [2, 3]. A system table in Access that contains information