I'm a penetration tester and I'm working on a new website that is vulnerable via SQL injection. This site injects with this payload:
?id=3333' union select 1,2,3,4 --+
Fourth column of second select returns in response.
In addition I'm sure that "db.php" is present at this path:
But I can't read "db.php" content using this injection:
?id=3333' union select 1,2,3,load_file('var\www\vhosts\mySite.com\httpdocs\lib\db.php')
What's wrong with this payload? And DB is MySQL.