################################################################################??########
6 J. _. S5 z; S. a, c$ b#
) Z- c" X3 T& v" x2 T% U; z& Z# Exploit Title : Net Ways Cms Sql Injection Vulnerability + t- o2 E4 ~0 A- D U
# . W4 Z5 Q; k$ h
# Author : IrIsT.Ir
& F7 y. Y7 q9 j5 y$ w$ h1 \# q#
' Z9 a J$ H- E* x# Discovered By : Am!r
+ L c1 h7 E5 w7 e8 C# @#
! t7 t% |6 e/ U5 P# Home : http://IrIsT.Ir/forum $ }7 F. Y; ]! `3 C! P) O
# # a+ }4 t( \" ~; B5 g9 B5 A
# Software Link : http://www.netways.com/ www.political-security.com
) w1 c' a+ Y( O1 O! H, I3 s#
# v8 y1 c! a- \4 c. f7 l8 X# Security Risk : High 0 H! w f. W( L' B7 N1 a
# 6 H. V& X( D% i% G% N+ P
# Version : All Version 4 a6 x( D. D8 y
# / k) D5 R* u8 V1 M2 j
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 1 Z% O" E( F4 c' r
# 4 a: z, z; {! p, Q6 e
# Dork : intext:"Designed & developed by NetWays" - j) [$ b( o8 v5 _6 H
#
4 S/ V0 M1 G. `) B################################################################################??######## 7 n2 e$ @* o# E/ M' G& R6 Z
#
& N/ x V+ ]8 W4 @% |# C# Expl0iTs : & A. r# E3 t0 B: Z6 o1 O* \8 ]' z/ r
# ) H2 @8 F" @8 A; V1 m% P: |
# http://target.com/news.php?id=[Sql] ( c* k- z4 K& i; {4 b
#
) j" y; j4 p, c7 A# ( @5 ^9 x5 ^$ ?8 t
# D3mo :
7 }& n% p0 n" R9 h+ c9 v- ]- v# 4 Q( p' h! j# r. L8 M# @
# http://compagnieparento.com/news.php?id=7[Sql] ) H# [/ Q5 r% n# X* }8 Y0 h7 `
#
+ _' B2 p6 J1 w+ d################################################################################??########
0 g: J3 f3 K) h3 S7 }9 G; e#
: |, O/ l4 ]9 y# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r 3 Y1 Y; s# e( ?" z' `
# . a! e0 e" g& ^: U4 `2 J
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
/ ]/ o4 u* _1 ^# P8 n* y0 {#
* f* S6 f2 y$ K# B- L1 S# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
. [: `5 H. }: R, S1 N: P# 0 f% j% t+ w0 z9 y5 z1 Q. L c
################################################################################??######## |