################################################################################??######## ; J/ |0 L: \( ~" g
#
; s, V7 N9 ?! v+ d: o# Exploit Title : Net Ways Cms Sql Injection Vulnerability
5 m: X; p- h6 i% Q# + y1 y6 ]+ h; l$ ^3 Q
# Author : IrIsT.Ir
( V! f* u9 N- p2 R7 m! ]# * e& d: u) g1 X# s- D' H6 I
# Discovered By : Am!r
& y9 O& t0 R' F& ~# + h: d4 Q" H% E7 f
# Home : http://IrIsT.Ir/forum 5 s. ?% o- w3 g( _1 \
#
/ |* ^- E1 D- `4 [2 k3 c c+ ?( q# Software Link : http://www.netways.com/ www.political-security.com6 g8 w5 Z0 o4 k4 d2 b( Z0 p
#
# }7 s/ {- `/ r5 Z) s* m# Security Risk : High 3 Z) q/ P3 o; e. O3 P( T
# ; ]7 `0 E8 N6 s+ r6 Z2 a
# Version : All Version ! C9 c5 c2 C: J2 \4 t5 J9 v z9 f
# 0 M2 @* K2 W" P9 _2 `
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 * L% g8 \4 f' f* k: H
# ) _+ `' c1 e4 s" d9 D. j* z
# Dork : intext:"Designed & developed by NetWays" 5 D) q! z5 i2 M1 T
# " m* ^6 j! G" F( j
################################################################################??######## # T" `" u: N; G- |7 \4 ^7 s
# # m. @; a3 g# G0 n$ Q/ T. m
# Expl0iTs : 2 P' @' M2 y, B E
#
) d, N; f" r4 o+ W) h4 _( m# http://target.com/news.php?id=[Sql]
6 B5 O# X9 e, t6 c! V#
& n+ g- e6 h! ~! ]9 u#
0 {4 J$ h( d0 `# {- a# D3mo : 6 t& m2 g" P3 B3 g9 C/ M5 R, [
# F$ t( `+ M7 \7 x; Q8 P2 }
# http://compagnieparento.com/news.php?id=7[Sql]
/ C3 y# f I" x+ e: X#
6 i" Q7 L8 p! W9 X3 Y n################################################################################??########
8 D6 Q: H( x }% m; D#
1 V* ]1 {% A- @5 ^# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
+ F) r1 t N4 A) s# - s/ q$ h# ^( a
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
; q. |7 u/ ^3 m2 Z: S' D#
) F# G: J& `: {# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum " g5 E5 X) W( w; P3 [
# 1 e5 W+ ] _& H0 U* x' n
################################################################################??######## |