SQL batch modify database tables

Here is an example of where you need to modify it.
A. xtype in (167,231) 167 and 231 are the xtype values of varchar and nvarchar columns found in the policypes system table. If other types of columns are also injected, add it to the backend of 167 and 231 as needed.
Also, update statements
Set @ sqlstr = 'Update ['+ @ tname +'] set ['+ @ colname +'] = replace (['+ @ colname +'], ''<script src = http: // w <script src = http://www.chliyi.com/Reg.js> </script> '','''')'
The <script>... </script> section in is modified according to the actual injected content.