How to inject through UNION SELECT?

Question

PHP

url: http://mysite.ru/news.php?id=-1 UNION SELECT 1,2,3,4
->
php: $query = "SELECT * FROM news WHERE id=". $_GET['id'];
->
sql: SELECT * FROM news WHERE id=-1 UNION SELECT 1,2,3,4

Tried:
LOAD_FILE()
SELECT INTO OUTFILE
SELECT INTO DUMPFILE
Doesn't work, there are limitations
Is it possible somehow to inject through select update, delete, etc?
DB: MariaDB 10.1

Answer 1

stackoverflow.com/questions/5759603/mysql-injectio...

Answer 2

Neither UPDATE nor DELETE can be done through SELECT ... UNION. And since access to files is denied, the only thing you can do is to pull out all the data available to you from the database. Through nested queries.