################################################################################??########
, Y! O3 v$ P- r6 X# 2 S2 E a# S( p3 p- U
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
. U. o( x% w% z* g9 {1 N0 ^#
, F! |- P; L5 }- X9 I3 U# Author : IrIsT.Ir 3 n- n; k( O' ?! R
# % e! @6 a( r" I* p
# Discovered By : Am!r
/ L+ O7 S7 ~, B" f$ A5 `#
; f! j; t1 Z) X" q! q4 J; o# Home : http://IrIsT.Ir/forum . @7 w4 q1 H# ^* V
# 6 T0 @6 P! w7 u
# Software Link : http://www.netways.com/ www.political-security.com. s1 A( H1 |' G$ j) `; S
# & ^1 l9 a# \* b6 h* S
# Security Risk : High
) R3 K6 [0 _# R1 [" j# Y1 r#
+ O# o5 P' {# A* K, S: g# Version : All Version
( i3 ]- G) ]; |; ^! K' r# 8 F y0 W. g. w7 Z4 c! K* K; c, `
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
, @4 m$ O% z. O* v2 W; C* I, P#
: \( q; {, m6 K# Dork : intext:"Designed & developed by NetWays"
! O; j: Y, V: z! V6 y/ p, C/ K# : m ?; ?, K8 u u* C' t
################################################################################??######## # j; [$ R: a3 m7 x: t) `7 R0 Z
# / f$ v# ~8 b7 Y {
# Expl0iTs : 1 \- j1 n9 E' `% X. |
#
* g+ ^, m) ^1 A0 J# k5 ]/ |: P& x# http://target.com/news.php?id=[Sql] * I7 V5 O I! T3 l. N4 L, b; Y" R4 b
#
2 I8 ?0 Y8 {: d* e3 I9 C# % ~8 {7 |2 ?7 d% l: Y5 t- ^7 r2 s ^
# D3mo :
4 A1 O4 W4 b8 U# 2 [; f. L5 H, V8 |* W: g- g* D' \
# http://compagnieparento.com/news.php?id=7[Sql]
- s( F/ I0 `0 W, _) a# ) m! b0 F; I- W8 _4 Q) i) |
################################################################################??######## 6 }8 X2 I9 l/ c9 }( \( q- P$ n
#
) f' E: I# t# H, V" k+ r3 r# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r 4 i& V0 p7 s" G8 ?# a1 B
# ) W( J* | X5 w" K1 ]; L
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ( @; V5 f; J: [2 Q/ K7 n
#
/ W- O5 V% x+ @" S4 L5 D9 }# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum d1 T z$ Z" i6 t
# 0 W5 D4 [: y n9 W! i
################################################################################??######## |