This specific string is typically used as the first step in identifying and exploiting a vulnerability where an application's database results are returned directly in the web response. Core Components of the Payload
The input you've provided, {KEYWORD}' UNION ALL SELECT NULL,NULL-- , is a common payload used in attacks. {KEYWORD}' UNION ALL SELECT NULL,NULL-- nvIP