MS Access SQL injection

["RaMatkal" <ramatkal () hotmail com>]

I am conducting a pen-test on a web app that is vulnerable to SQL injection. The backend database is MS access.....

i have managed to get a list of table names using something like the following: 
select Name, from MSysObjects 
where  Type=1
  and  Name not like "MSys*"

However, I am struggling to find a way to gather a list of column names from each table which would allow me to read 
any data from the database......
 
Anybody got any ideas?
Thanks in advance...
ramatkal () hotmail com
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave