################################################################################??######## 6 c! F) t% ?* W" b% K9 O
#
$ L! p1 h6 T8 r9 h9 k# Exploit Title : Net Ways Cms Sql Injection Vulnerability
9 O! d. ^9 |- F5 V! O# 9 i N. o8 s- B7 v
# Author : IrIsT.Ir $ E- W2 z& W# m& r" Q
#
1 L) A' J+ q; y, X. I4 j6 E9 [6 W3 {# Discovered By : Am!r / _, j" M/ F9 Z" n+ J
#
5 i. j* i6 W( }# Home : http://IrIsT.Ir/forum % k, q& I" w; r; W- l% c* n+ J/ @
# / j$ L1 y' i j. d: C, |5 c
# Software Link : http://www.netways.com/ www.political-security.com
Q9 K6 D& m! j8 t# 1 N" C( {0 d/ F) u% M
# Security Risk : High & [5 V. V _( [) [" a8 Y
# 7 S; T0 q1 `/ R1 `: v: K
# Version : All Version ) G# H2 v, _$ I l/ G
#
$ \, B+ z$ B- X! p0 I0 S# Tested on : GNU/Linux Ubuntu - Windows Server - win7
/ v6 m) T# `; @5 Z, [8 l1 ]7 U5 ^# * w9 ^8 Q L2 b( L. T
# Dork : intext:"Designed & developed by NetWays"
, c/ z/ e& @ {; P) c#
8 i& W" u) ]+ p4 N8 l################################################################################??######## / i. w0 ^5 c4 I: j
# $ i Q* I: b9 E( z6 ^! r/ @6 a
# Expl0iTs :
/ @7 l" y9 `: |" q# ( a7 I) p* s- P; z% F" n
# http://target.com/news.php?id=[Sql]
, X! M- H& N' R- Y( T& S# , k2 I4 |2 X; o; e5 Y+ H
#
3 {$ W H V6 N0 w; F; O# D3mo : 6 c0 b7 b3 A/ D% M1 I% Y
# ' [2 w# t5 p0 v1 X$ g. `0 n+ O; C
# http://compagnieparento.com/news.php?id=7[Sql]
. b# s9 |0 p7 g9 w+ M, @1 z#
6 p4 t; h- a3 j% W################################################################################??######## ; U U: }- O3 `) U" D/ I( I
# ( M/ B+ u* O* S; J4 V, w
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
; L& l# s* T$ U p# H }& p0 O# 2 e; {/ T0 O- v/ }* O7 f
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 8 k, l: x' n# j* g9 v5 C
#
) J; Q& v9 Y3 Z# @# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
# U2 Q; ` \2 Z, P: \# & b; v; V! v: F$ d' ], q
################################################################################??######## |