################################################################################??######## 1 J5 ]' W+ k' [1 L/ R0 _
# + l, u, W: w- v, M( B
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
) M% h/ D" P: g#
% U2 B2 h/ g9 |0 ?+ }, C2 c# Author : IrIsT.Ir # V7 @& i! n* M' U) L
# ! w$ t* [4 m' v, l( c! i* R
# Discovered By : Am!r
M' {1 ~9 h; l& ]) b6 X# ; T0 u( l* `: E# B
# Home : http://IrIsT.Ir/forum
) ?8 r# b5 v1 s/ j, j#
% Z8 l" {! o8 }. y, h5 Q$ K. P0 v# Software Link : http://www.netways.com/ www.political-security.com/ k6 I" P0 {% }) S+ d8 ^
# . S+ K/ M. {, w7 ?6 F
# Security Risk : High 3 k1 B, ?+ D9 t) I
# $ J8 Y( }7 G& u& k7 S3 B+ ?1 I
# Version : All Version
2 P3 n" @( ]$ Q! M c$ e6 i# & A: j8 w' U* g% ?
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 ! E: u4 j7 {9 ]
# # Y9 [2 Y q+ B. N8 x0 k
# Dork : intext:"Designed & developed by NetWays"
6 I+ G7 B' H$ S5 z; I# 7 z; c9 [% X1 n$ R
################################################################################??######## : Q# f. T0 [9 ?; x O, v
# 5 ~8 w0 |2 ~, l$ C) f+ |& Z) S
# Expl0iTs :
/ r" k* Y! K# k" K! A# ' \; R: I% J; D+ T9 o' ?
# http://target.com/news.php?id=[Sql]
i0 B2 R* u) }3 V/ K6 S#
* y' e8 A1 M1 L# ~4 U# / ^$ ?) I. J" c! K y) N: m
# D3mo :
& R6 ]+ f6 X3 b2 m4 [3 L0 }#
( W H5 c% b" o' |6 a4 M$ M# http://compagnieparento.com/news.php?id=7[Sql] 8 s+ x$ @1 W9 i& D
# # f3 J8 `. q! g
################################################################################??########
) N2 ?" ]3 b" G4 O* [9 i, X. I$ O#
. h8 i9 \3 `1 T3 v$ L3 o# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r : d! y4 l% x3 p6 R& ~- g
#
$ C7 a& l4 N& \1 ]0 p: y; K8 v# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 6 C$ U* K# P8 X* e- o7 k( U# s
# 7 J$ B( Z" r, E5 U6 J) Y- F
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
9 Z$ G* [0 P, @' l* h# 4 U* J: ?6 J8 x) s( ?7 j) g
################################################################################??######## |