################################################################################??######## 7 H4 {; i/ e2 a: z
#
* u+ v* c0 X8 V+ l' `# Exploit Title : Net Ways Cms Sql Injection Vulnerability
. r- X8 [- p4 ]1 a9 |; `#
& d. }9 a1 P' `! Q( J% y# A# Author : IrIsT.Ir
# u( L* a& g+ G8 J, _; g# M# ! b/ {' l& W' a, I* X) X/ ?6 ~+ P
# Discovered By : Am!r % z9 l2 o2 B: a+ t
#
5 H: } e. }8 _$ j, V3 C# Home : http://IrIsT.Ir/forum - Q# o; w* z; T, s0 E8 e
#
" g0 m) U3 q7 k6 B# Software Link : http://www.netways.com/ www.political-security.com+ f% _. T Z* b' ~2 z
# " }& a1 n/ {% d6 o0 X6 O5 P# d# }
# Security Risk : High ~+ K' M4 J1 [
#
7 [5 W- J- d; H1 @' r% ~' Z# [/ }/ K# Version : All Version
7 m5 x# p2 X# f0 K+ P$ g# $ Z4 c# I3 i2 M# I: [/ _
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
6 |- @# O2 L/ J0 ~% S7 k6 H7 U+ F' c# 6 `5 c! {3 k* `8 x
# Dork : intext:"Designed & developed by NetWays" - `* A' ^! K% }, N3 B+ A+ N
#
5 d' b0 U t% i7 E. o8 p3 O################################################################################??########
; }& [3 M) S" B3 p7 w* {# ! F m9 @# f4 Q; [/ r
# Expl0iTs :
{0 j R2 }% i+ C0 Y# q# " [/ u1 b" x4 i1 b7 S
# http://target.com/news.php?id=[Sql] : u: T% O q3 _$ b6 P! |/ w
# , D" u- z3 k n$ z4 ]. U9 N
# . u9 z8 G2 Y2 e, a3 B2 ~) ]
# D3mo :
$ ]# X& w. u: Z#
+ V3 n& O/ `: ?; [6 G% _0 e# D! K# http://compagnieparento.com/news.php?id=7[Sql]
: n: q: v# j4 `/ Y8 E7 \#
+ _! T2 O: u( ?$ T' m. C: v ~################################################################################??########
2 z5 Z; p' a" j+ K' f1 j+ @0 l9 `#
' b( R4 m4 Q0 k! S- d5 |1 t; E# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
( o6 Y, Y. h' b" C+ [6 U' e- l# ' w/ h- T' w& I/ d
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 9 t+ @; g2 @0 {1 N5 w8 e: P8 I# ?
#
: M! H- }$ a8 T) F" E# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum ) x7 {# W* {' u8 O
#
# r9 q0 l3 j+ [################################################################################??######## |