################################################################################??########
( U2 L% k- Y: T2 c; y; J#
" v7 T1 G4 v, i5 q* D) Y# Exploit Title : Net Ways Cms Sql Injection Vulnerability " ]! A! I0 L) L( ]- h
# 9 \* M$ ?; p4 e. q" U% v
# Author : IrIsT.Ir
' Q3 Q7 G8 u: w7 V4 I# # [! E( w; [1 Y4 B2 B, p) B& W* s
# Discovered By : Am!r
) _. X% ?; r( ~# 9 |' w7 d- }$ }* n$ X/ z
# Home : http://IrIsT.Ir/forum
3 a+ ]% k/ f) f( X% a, a; |5 i#
4 v0 q6 R( c- C7 h/ }) N& A# Software Link : http://www.netways.com/ www.political-security.com
& G' x/ p, ?& n5 e( k#
7 ]! G" d' \9 w( b9 L. L9 \3 s% ?# Security Risk : High ( W+ i+ k8 T* T- q8 g! T0 E
# ! A, m/ [: ]4 w/ l* I3 c
# Version : All Version
L9 {, v* {6 z" G4 A! S5 E#
" E0 H6 P, q+ ~ Y: E( r' S# Tested on : GNU/Linux Ubuntu - Windows Server - win7 ' B& @# u" n) C& w$ X) Y9 }7 x& _
# % c% `0 z) v9 S8 Q, Z0 R X6 W
# Dork : intext:"Designed & developed by NetWays" & J+ x% k6 C/ _& L S' {
#
$ E* r9 v/ }* v$ Z################################################################################??########
+ g4 k2 g& j, S, T1 A; @ J4 S# % F2 f5 _$ K k4 r7 `
# Expl0iTs :
) b( I! e+ ?9 C' J- u#
# I R, H6 E6 o; r# http://target.com/news.php?id=[Sql] # m; L7 [7 d: J! Q5 D+ f; a
# - c# ^7 c9 e0 j/ e4 w
#
8 |0 `1 q! k* Y$ U8 v1 l/ H8 p# D3mo : 6 U2 O3 ]# l. D8 w
# - H; N7 F. v! V" D$ Q* i L, t
# http://compagnieparento.com/news.php?id=7[Sql]
3 r/ O( Y a9 H0 W9 }, \/ R# & t; p5 l8 I$ v
################################################################################??######## , z' ?' M: p( K2 _
#
( c; k: R- U N8 R# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
5 c) r" c& t: L3 l c# 0 g# g! s- q8 O- P* \
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
7 J- o6 \4 \; U4 m i+ o$ l2 x# v# 1 f( L9 L5 T I2 T, h- a: }% r4 u1 w
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
2 P, A) V* G2 n# 2 F* n' y" L/ D6 H
################################################################################??######## |