') AND 1 1 UNION ALL SELECT 1,NULL,' script alert("XSS") script ',table_name FROM information_schema tables WHERE 2 1-- ** ; EXEC xp_cmdshell('cat etc passwd')