var statement = dbConnection.createStatement(<![CDATA[
    SELECT DISTINCT
           (SELECT title FROM moz_bookmarks
             WHERE fk = p.id AND title IS NOT NULL),
           p.title, p.url
      FROM (SELECT *
              FROM moz_bookmarks b
                   JOIN moz_bookmarks parent ON b.parent = parent.id
             WHERE parent.id =
               (SELECT id FROM moz_bookmarks
                 WHERE title = ?1 AND parent =
                   (SELECT folder_id FROM moz_bookmarks_roots
                     WHERE root_name = 'tags'))
           ) tag1
           JOIN
           (SELECT *
              FROM moz_bookmarks b
                   JOIN moz_bookmarks parent ON b.parent = parent.id
             WHERE parent.id =
               (SELECT id FROM moz_bookmarks
                 WHERE title = ?2 AND parent =
                   (SELECT folder_id FROM moz_bookmarks_roots
                     WHERE root_name = 'tags'))
           ) tag2
             ON tag1.fk = tag2.fk
           JOIN moz_places p ON tag1.fk = p.id
  ]]>.toString());
try {
  statement.bindStringParameter(0, '\u91cd\u8981');
  statement.bindStringParameter(1, '\u4ed5\u4e8b');
  while (statement.executeStep()) {
    var bookmark_title = statement.getString(0);
    var place_title    = statement.getString(1);
    var url            = statement.getString(2);
    alert(place_title+'(bookmarked as '+bookmark_title+')\n'+url);
  }
}
finally {
  statement.reset();
}