################################################################################??######## ' B$ ^! q9 |% ?
#
! t3 G* v2 L' T9 C2 m9 ]7 y a) O# Exploit Title : Net Ways Cms Sql Injection Vulnerability
x& b8 N# u. c0 E# 6 n1 g$ Q# H9 V8 M. M+ Y0 |+ g; }
# Author : IrIsT.Ir 1 h3 ^# X$ y8 K$ B- f
#
- K/ H' x* |' f# Discovered By : Am!r ! Q' c; W" B. ]+ M* K
#
1 ^8 M) U7 W. Q# Home : http://IrIsT.Ir/forum * r" p I3 J- ?
# % E2 K4 b; a4 r
# Software Link : http://www.netways.com/ www.political-security.com/ e$ G" I. M' a' ^' i, F- |& y
# ! Z6 A: c& F$ H; G( P% r: \
# Security Risk : High
3 W7 m. t7 c, H5 u6 ?% D#
( G* N H! `5 N+ _# Version : All Version
. t* |, |& _* M+ j#
+ D8 h! V5 I9 y: ~6 O; i; x' j2 z# Tested on : GNU/Linux Ubuntu - Windows Server - win7
3 n* g3 D! S. R; Z7 I# j& [#
/ K! b2 D5 Y! L4 T# Dork : intext:"Designed & developed by NetWays" 3 e! ?$ X. d0 w5 }! u5 ~2 l3 t
# 3 Q& ?" j$ {- b! u. b! G4 E
################################################################################??######## & w# o$ I% v1 y
#
# y$ _9 L2 o% d5 f& _- m. r# Expl0iTs : " H" r: S. F% B4 }# A+ B9 w/ @
# ; ^9 m$ H2 s8 |5 R9 J( @3 `" n
# http://target.com/news.php?id=[Sql]
3 x% r. X* T6 ?9 I* g* \0 x# ! P! G/ ?+ c# S* H: E; O
#
1 d- O$ @& c/ k/ K, d# D3mo : V" ^! l/ d+ L7 @6 k9 v) T# q
# % A& P! e3 E7 m/ t4 s# ], a9 ?7 s4 \7 i
# http://compagnieparento.com/news.php?id=7[Sql]
* p; \" Z. D/ c, x( w5 p# : A3 L3 M7 W3 o4 [ Y% _- c- S. ?$ E
################################################################################??######## ( F% C4 F8 X- t1 b7 U. L \2 a
# 0 M# y) T/ G) a! q; o& V
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
( O! Y* V& ~2 ~4 n9 b# ) B/ ^/ D! E4 i+ v% o7 g1 h( m
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ! b y4 H- t5 V9 z
#
; R- P) Z$ L) y0 W1 N, a% Z# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
8 k3 {" N( b4 X) r7 H2 E5 C$ A6 V# ( |$ T# p J; W( H) \+ j
################################################################################??######## |