################################################################################??######## 4 }: n1 N$ \2 L: L) p; Y$ X* z
# 6 ]: s; @! O% n" L4 q: v4 S% S3 i
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 5 I# G. \3 j1 }2 a) o- M& W i& q6 N. [
#
, y5 h) G/ l' K& Y% i) N2 ?# Author : IrIsT.Ir 3 U' O- M' q0 K# r: S
#
2 Z, @. W/ U& i; x0 M' g: O+ ^7 W# Discovered By : Am!r
, g: E+ V& L% W0 G9 s6 @7 w#
$ x8 m8 q9 T7 f% ~9 u8 a# Home : http://IrIsT.Ir/forum - z$ [* r; m/ N" S
# / v8 r' t- H, \! ~4 H
# Software Link : http://www.netways.com/ www.political-security.com
% g+ A/ `* h: \#
" c% n( L4 V% _3 {0 f5 Z# Security Risk : High $ s8 X, F8 E% a& b- i$ p) m
# ) B5 ?, x0 N" c. D: @. R
# Version : All Version
+ S; q/ X+ Q9 ?- a3 |3 U. }#
+ S9 ^7 J: H! R" M9 R# Tested on : GNU/Linux Ubuntu - Windows Server - win7 4 L6 l+ }% G4 `* x1 Y
#
, z: A: M6 U/ M1 P" |# Dork : intext:"Designed & developed by NetWays"
5 X: V: q2 h: }; M& P2 r# 8 I8 x/ T g. T3 y4 E. N& S1 U- C
################################################################################??########
/ E0 I! E( G O; r/ P" c#
: v4 f* ~, F: h2 Q" Q# Expl0iTs :
6 P5 u9 t+ l) G#
8 g: e3 \; ~3 K# http://target.com/news.php?id=[Sql]
/ X) z/ F1 c! b' j2 u( N- S5 F" [( g# ! D: Q' j. L$ w/ Y
# 1 [3 \3 G7 D* K& H5 a' [% q1 S+ ]
# D3mo : % ?: T1 n* ?" o( a. t: W
# 9 G; s) Y9 h! h7 _+ D
# http://compagnieparento.com/news.php?id=7[Sql]
8 y3 A2 z; }5 E0 E- V# T3 W |#
8 G7 _* D- P# y; m! d- t* ]+ _################################################################################??######## " ~) ]. H( G: w$ ]; {" }( @! H
# ?* }1 @. a- g: |1 T4 @* T
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r " D: k6 c7 E1 g" {" M% K
# ' W, k" i; ], Q0 ?
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
: |6 f* x" f+ V#
2 X7 f/ I( U& o/ j# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum : t# K. ]6 ^ d. l
#
+ `# }, A6 D7 I* f5 H Z################################################################################??######## |