Joomla JomEvents 3.7 SQL Injection

`################################################  
#Title: Joomla JomEvents 3.7 - SQL Injection  
#Credit: Bilal KARDADOU  
#Vendor: http://comdev.eu  
#URL:  
https://extensions.joomla.org/extensions/extension/calendars-a-events/events/jomevents/  
#Product: 'Joomla JomEvents 3.7'  
#Developer: Comdev  
#Extension type: Plugin  
#Last updated: Oct 29 2017  
#Compatibility: 3.X  
#Type: Paid download  
#Google Dork: N/A  
################################################  
#  
# Description:  
# JomEvent offers an event management system which provides design and  
seamless integration with your current Joomla deployment.  
# Look no further: JomEvents is a one-stop-shop for your events website  
implementation.  
#  
# POST -p [distancew & date_end]  
#  
#  
http://127.0.0.1/joomla/index.php?option=com_jomcomdev&task=maps.itemsjv&format=json&extension=com_jomevents&limit=100  
#  
#  
title=hello&address-lat-lng=London%2C%20United%20Kingdom&distancew=50&date_start=2016-12-11&date_end=2017-01-01&latitude=51.5073509&longitude=-0.12775829999998223&26472415b6677db80c6b2404296e4a39=1&  
#  
#  
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)  
################################################  
`