Which of the following types of SQL injection attacks extends the results returned by the original query, enabling attackers to run two or more statements if they have the same structure as the…

Union SQL injection leverages the `UNION` SQL operator to combine the result sets of a legitimate query and an attacker's malicious `SELECT` statement. This allows the attacker to inject new data or retrieve information from other tables within the database, effectively extending the original query's output provided the injected query maintains the same column count and compatible data types.

Error-based SQL injection exploits database error messages to extract information, rather than combining or extending the result set of the original query.

Blind SQL injection deduces information by observing application behavior or response times based on injected conditions, without directly returning data in the query's result set.

Boolean-based blind SQL injection is a variant of blind SQL injection that infers data bit by bit by sending true/false conditions and observing the application's binary responses, not by extending the original query's output.