################################################################################??########
" v; o8 |9 G/ ^9 s# % X4 g" B( H/ [/ h' G( p8 ^
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
5 I# e8 c8 U7 c) l# z#
, ~& d8 s5 v0 I G# Author : IrIsT.Ir ; d, ?8 k/ S5 ]# Q( v
# 7 }% i" b: I% v& S- O Z6 I
# Discovered By : Am!r / q7 C) l! z3 X) H7 S2 r
#
" y9 J7 H v/ p" p+ ^9 X0 H# Home : http://IrIsT.Ir/forum
8 D1 u! A7 E/ Y#
2 c& P) W0 E1 A" _6 v. b3 c3 A# Software Link : http://www.netways.com/ www.political-security.com6 a8 y6 M" k2 H1 l. n; R- K5 G
#
; {/ X6 A6 b1 L; s& H b# Security Risk : High $ e) O% v1 ^( }
# " [ |* S$ b% X8 R8 q3 c6 c
# Version : All Version ' N) X+ w0 L( K- G8 C" Y
#
) C3 L" b3 N$ }- p V# Tested on : GNU/Linux Ubuntu - Windows Server - win7
: i8 E1 \5 \" a/ O. p#
+ @4 `! N- k9 |& n/ U0 F# Dork : intext:"Designed & developed by NetWays" 6 V; T" V9 }! ?5 z9 e
#
' a. e }! i: p N& [7 F/ I################################################################################??######## ! H; [! m8 e9 f u8 e! h
# 1 G8 C. G4 U9 V2 X h6 D
# Expl0iTs : $ u4 E# V/ y0 D# ^$ r6 d) t
# * V7 g0 @( C! D: d
# http://target.com/news.php?id=[Sql] $ g/ T6 B: Q8 v0 |3 J
# 6 d3 K; B% B- U0 S% P7 G# T, s
# : O% O& _" x9 l( } l1 W! b( ?
# D3mo : - f, G _0 v! M/ m) K
# $ @6 R8 ~, M/ M" ]3 j- z: g& Y
# http://compagnieparento.com/news.php?id=7[Sql]
: v" Q1 c7 ^& v#
/ } h0 ^; o( f7 V+ |################################################################################??########
" i+ M& F* z/ Y8 L' o* a& y# " E8 N) g, F$ K: n5 S
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
3 @8 O5 a0 j7 o5 ]+ o#
/ ^2 p$ M8 Z( ]/ F# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
! B, o0 y6 d- k( G# . W4 }" Y$ x5 W2 c3 S% r R! V
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
, z; C* E% k4 B: f6 s; d' X) M# ; W' m% A! _$ ?
################################################################################??######## |