This version of ASP Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
This exploit retrieve the username of the administrator of the board and his password crypted in SHA256