Elliot is in the process of exploiting a web application that uses SQL as a back-end database. He is determined that the application is vulnerable to SQL injection and has introduced conditional timin

NoSQL injection targets non-relational databases like MongoDB, but the question explicitly states a SQL back-end database is in use.

Blind SQL injection occurs when the application does not return query results or error messages directly to the attacker. Time-based blind SQL injection specifically uses functions like SLEEP() or WAITFOR DELAY to introduce conditional pauses, allowing the attacker to infer true/false conditions based on response timing rather than visible output.

Union-based SQL injection uses the UNION operator to append a second SELECT query and return data directly in the response, which requires visible output - not timing delays.

Error-based SQL injection relies on the application returning database error messages that expose data, which also requires visible output from the application.