################################################################################??######## ' q% P* y2 [- o% L
# ) U, N1 @3 D* p: `* j8 X2 ~
# Exploit Title : Net Ways Cms Sql Injection Vulnerability ; a8 x1 H! O) j. P( t* p
#
' Q0 Q: L) B* U. H/ @7 Y) S# Author : IrIsT.Ir 1 s# D- C! J% a, H% T
# & v( x2 T' K/ Q- G3 [# d3 A, r2 ]
# Discovered By : Am!r 3 C& B5 b+ Q c I/ `; n7 Q6 V
# * h3 t: r& U, S
# Home : http://IrIsT.Ir/forum 9 z: B7 ~6 H6 g
# + ^. @+ b" A" t! v* o5 z" C
# Software Link : http://www.netways.com/ www.political-security.com5 P; }2 w, U9 h. _4 i8 J
# 3 j$ e5 w3 j" F, M/ E6 X
# Security Risk : High
: T/ y. \+ ~5 ]; o1 j; T#
* c2 V# A$ ]1 q/ K( X( t# Version : All Version
2 n* R( N) U) Z: y#
) @' `* F. \* x/ o2 f) y; k+ l% l# Tested on : GNU/Linux Ubuntu - Windows Server - win7
3 X! U6 {- U2 y#
& t8 ~3 U. ]( F7 Z9 b# Dork : intext:"Designed & developed by NetWays"
! x. f( g9 T( V/ W#
7 \! e$ F( C2 Z+ P8 f' }4 G- {################################################################################??########
6 d% n8 Z7 y3 a2 g0 @# 9 O$ b9 _6 A, O" ?5 s$ x
# Expl0iTs : 0 I6 y9 r" y) |3 t2 A9 `0 x: |
#
7 t, L' z0 U h$ O. {% I# http://target.com/news.php?id=[Sql] 9 p4 r! s; q8 e6 B8 e H8 I
#
' o; e2 Q% ^: b7 F#
D& e C4 ~& p4 L Q% z5 [# D3mo :
( ^1 Y$ B* H2 Y" W. b# 3 C. f- g+ ]1 `7 p$ L [, p
# http://compagnieparento.com/news.php?id=7[Sql]
; g6 Q6 Q# C- z* ]& I" _; X" |8 ?#
" Z! `9 f8 \+ B1 C# ^- g' _7 j################################################################################??########
T( }3 ]2 E' p& a- o#
$ I) _' j. v' B! P$ p- B9 M# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
! J) O0 t( v7 A/ P. W7 @& {#
- I$ P. o2 Q! X$ d# V: z# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r , K3 A! F+ V+ x2 D
#
. |1 ]8 {7 `9 @2 |" r5 c# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
6 o) o4 ]# _, i+ M- D3 I8 R# y0 s& j#
( q8 z+ Q/ u+ R- u: y- c" x: k################################################################################??######## |