################################################################################??########
; K9 c& q2 z8 H4 A. u ?# 2 G9 |# L8 I# R7 w$ R
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
) O) n _+ X$ d# p# * M; q9 h: {2 F' F R+ |2 Q
# Author : IrIsT.Ir
4 d! T& c- v j" }& a7 P#
" ^3 K& z- U. r ^( }4 T, L0 i# Discovered By : Am!r
- P& t% y& b/ t4 l#
- o9 q$ K R4 U# Home : http://IrIsT.Ir/forum
2 P& D% _8 d$ e0 I$ L+ x M#
% b# @$ l$ I# K( t! m# Software Link : http://www.netways.com/ www.political-security.com1 x. m2 V- B2 Q5 X
# ' [# U4 `7 Y$ b7 k! K$ [
# Security Risk : High ` _* U; ^5 ^
# 1 E( ~4 U. Z+ R/ B# a. M2 n
# Version : All Version 9 U; `1 D/ J0 F _; E$ ^
# % E: {. j' G. D1 n- I
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
+ e: }5 ]& x- b- t8 X$ J! A/ g( J# 6 h6 g* q) m! O s2 B1 ~
# Dork : intext:"Designed & developed by NetWays"
% i. I5 v: E6 r( _$ {#
) i) ^. j: v! d################################################################################??########
9 ^6 i2 { b$ B#
# z+ X/ y4 P2 `( \4 F2 e$ d# Expl0iTs :
' v4 K6 J2 l. @; b#
) E) W. y) d" C5 [5 }/ j# http://target.com/news.php?id=[Sql] ' i4 ]7 a0 O' M/ k4 H0 y
# : n; G9 ]5 U, l& T! b( W0 x2 y0 a( _
# ( U8 _2 x. u& p8 w9 d* |* ^
# D3mo : r6 V4 v- D3 A9 U- F
#
; M U N7 s* t+ r. K# http://compagnieparento.com/news.php?id=7[Sql]
6 n4 q2 j% @3 Y$ x# * k+ O: Z$ X. n: J) F) K0 \
################################################################################??######## 3 h3 O; q) B# {% ?. F
#
; Q0 G h9 C9 V e9 j$ l# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
Q) _* Y2 d! l1 j7 }0 c#
% }7 r m3 R+ o* X+ |/ } j# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r , u* b/ ^' N% {' I6 `
# 8 K8 \9 m7 o9 i# u
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
: `: O; z# E' S2 g& K#
& Z8 m. a' k8 I8 L+ a* t* K9 a################################################################################??######## |