No visible results but visible errors? Push the data through the error message with extractvalue/updatexml.

Error-based SQL injection

When the page shows database errors but not query results, make the data leak through the error text. On MySQL, extractvalue() and updatexml() throw an error that contains their argument:

' AND extractvalue(1, concat(0x7e, (SELECT version())))--