################################################################################??########
6 Z- g7 L& p4 Z: w# ' F9 Z! `9 E; R% E% o
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
' E/ u1 x& z' ?# t9 c# Q#
5 T% Y* U+ `/ R: b7 D* z% C; v# Author : IrIsT.Ir
( a1 u$ o! u8 Z, e# o. T8 I5 w# 3 u" C. |/ J( ?% V3 M+ H
# Discovered By : Am!r ! V- _& H% @8 @: ]& p5 |) ^
# 0 T% Q& L( P" i! j' j
# Home : http://IrIsT.Ir/forum
) D8 r* Y0 d; M+ v# . V, V* p0 P( o( o
# Software Link : http://www.netways.com/ www.political-security.com
* h) K4 y! x1 _! s#
% ]) A3 P! S( _0 q P# Security Risk : High
' f6 \/ }% e9 ]2 H+ S" b2 q# 2 m9 p0 @) E% M1 }
# Version : All Version
' o% s' }. L; A* R5 t/ C# * L* _" L( K4 |7 f$ }0 T" k0 ?5 Y
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 / E7 {% a5 }6 {3 `" Z
# # {8 K; m! L, `8 f8 S0 |
# Dork : intext:"Designed & developed by NetWays" & _! M; _ A% w" W, n8 [
# & g3 d* D4 j4 _8 x+ L y( d; I8 I, ]- C
################################################################################??########
* R2 D4 g9 _( N4 @3 C6 r6 ~( _4 q- R9 K6 I# ) {2 ]9 J6 l( I$ a2 o b
# Expl0iTs : 6 t' R9 V7 I. Q
# ! f! J# A) U7 \; _& {- i2 q
# http://target.com/news.php?id=[Sql]
3 r7 L: ]* {# Y8 ] t# z#
% ^9 C$ @. o8 [1 d: t4 g# 7 _5 E% c' }/ O+ s6 V: r8 Y0 P
# D3mo : ) P; `! U4 Z- o9 p7 k) ]( h
#
1 H- P; X7 ~7 f: o/ L! X. V# http://compagnieparento.com/news.php?id=7[Sql] ' t* P; c7 t: t+ |- Y! `
# 8 N9 H( R* _- ?) B, V7 Q |
################################################################################??########
. `: y/ Y7 k1 J; `6 Q b! o# % _3 f0 n: b2 {
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r 9 j* o8 I8 G$ K, D0 @4 |9 K' [
#
( X1 r: u: L6 x+ R* m) P# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
9 s* E+ i% Z+ z% B. u0 T" E#
4 ^1 Z" L) N! Y4 |. F9 K# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 7 z! V# \# ^) X4 b1 D
# 5 K$ t. F8 Z/ T9 [, G! s
################################################################################??######## |