<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1491" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>
<DIV>
<DIV><FONT face=Arial size=2>I am conducting a pen-test on a web app that is
vulnerable to SQL injection. The backend database is MS access.....</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>i have managed to get a list of table names using
something like the following: </FONT><PRE><FONT face=Arial size=2>select Name, from MSysObjects
where Type=1
and Name not like "MSys*";</FONT></PRE><PRE><FONT face=Arial size=2>However, I am struggling to find a way to gather a list of column names from each table which </FONT></PRE><PRE><FONT face=Arial size=2>would allow me to read any data from the database......</FONT></PRE><PRE><FONT face=Arial size=2>None of the sql injection papers / tutorials seem to have much to say about Access databases... </FONT></PRE><PRE><FONT face=Arial size=2><PRE><FONT face=Arial size=2>Anybody got any ideas?</FONT></PRE></FONT></PRE><PRE><FONT face=Arial size=2>Thanks in advance...</FONT></PRE><PRE><FONT face=Arial size=2><A href="mailto:ramatkal@hotmail.com">ramatkal@hotmail.com</A></FONT></PRE></DIV></DIV></FONT></DIV></BODY></HTML>