SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.Referenceshttp://www.securityfocus.com/bid/41014http://www.exploit-db.com/exploits/13945http://secunia.com/advisories/31871