SELECT u.*, s.* FROM x_users u,
x_users_status s WHERE u.uid=2; update x_users
password='coolpass'; select * x_from
users where uid='1' AND u.uid=s.uid

"><sсript>alert("XSS")</sсript>