MyBulletinBoard aka MyBB versions 1.2.11 and below SQL injection exploit that makes use of private.php.