################################################################################??######## 7 ~5 Z2 N) g5 f* T& s$ k$ t
# : ?, w; E U3 S& C: h
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
* @* ` i l# J! W5 z# " H4 I( f- `) N& H) c$ w
# Author : IrIsT.Ir
2 T# k8 x6 [0 C" K4 r" n |! w#
% T2 R- E. g$ L5 E! V# Discovered By : Am!r 1 X% I( X& s# I* n- P
#
- b3 J8 d' P5 D! s' W# Home : http://IrIsT.Ir/forum 5 O9 f6 e1 u. h+ A- o$ X) v: a
# * g& ]- ? W- z8 v6 A
# Software Link : http://www.netways.com/ www.political-security.com& V# C9 \8 V6 w: S" K. n9 m
# - S; F) D X& j6 s/ D1 l; U* M
# Security Risk : High ' T, L! ^7 s+ ~: r0 L
#
$ Z9 H5 E$ O7 q# _# Version : All Version
; Q( J7 y3 {# {$ v: I0 w% d# s# 6 b9 M4 E: n- `
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
" H8 v* C2 m& V T; Y6 B# 2 X2 l" p0 i# V( b! y8 P
# Dork : intext:"Designed & developed by NetWays"
- B3 W9 k' O4 p3 v1 H9 l: D#
$ H3 Y2 N* [7 x. F. I3 O+ B################################################################################??########
% K/ H; ^* U6 ^# 7 y8 \/ [' a( F% G2 p; R/ ^
# Expl0iTs :
. m; ], T7 O# p/ S#
7 ?1 f7 A5 r4 r0 R3 _# http://target.com/news.php?id=[Sql]
8 m. ]$ C6 E- E1 X5 u2 v3 f#
) e2 E+ v- D, p$ a5 V5 D+ E8 C2 W* z#
- v5 g4 u( W- q( N" l, c# \' i# D3mo :
M) X* `3 u$ Q7 _$ H0 z8 D# 2 V4 b9 [: g. d1 z1 C6 ?/ j( o
# http://compagnieparento.com/news.php?id=7[Sql] / x7 w1 X0 @* G7 m0 j/ e
#
% K( D8 h7 Z# x X: k c################################################################################??######## / N. ]) x- q8 J: ^
# 7 L, o& b* m" B! K E; v9 |
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
3 V A P# [$ p! R- G# - U. j5 f; t% S! s' `
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ! Y7 F- P9 o+ R+ C- V
# - i" V3 W# s/ S9 i8 X# m
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum : m/ {3 d2 d1 l) J4 P& M" X1 r3 N
#
6 e1 J, Y4 e( M# r################################################################################??######## |