Can files outside database which are not part of any tables in database be read via union based SQL injection? For eg
http://xyz.com/fetch?id=3 Consider id parameter is used at server side by cursor library to execute mysql query and no sanitisation is being done. Would something like 3' union select '../../x.py' -- be able to give attacker x.py file which is not part of database?
For better reference to the problem (Flag 0): https://dev.to/caffiendkitten/hacker101-ctf-photo-gallery-4foi