#1
there is sql injection in ipb forums in tabs :)