################################################################################??########
. Q. T1 k) {! g' r" W# # h# u9 f D" e
# Exploit Title : Net Ways Cms Sql Injection Vulnerability
% b4 q% [% }: D) r' T#
* p8 F- G, a; }/ i7 c# Author : IrIsT.Ir
7 y' y$ O- k* c' e$ f" b$ H* F8 j1 L# 4 w# P1 I* t/ s* o
# Discovered By : Am!r
* `0 \2 ^- k+ f! F5 j; W1 K: G$ P# 5 O. p% u, D7 ]! z5 p, d% X+ [
# Home : http://IrIsT.Ir/forum
z4 h! A8 [1 [3 O# i2 m. a# $ j+ K/ V8 E3 d/ ^, `4 M) z
# Software Link : http://www.netways.com/ www.political-security.com4 q# j9 Z0 f- V$ n9 u3 C1 {3 L
# 1 M0 z. O7 Z( d/ t6 O$ P
# Security Risk : High 6 [ |4 S9 y6 q3 v. G; @# n
#
: y) F; @8 f3 u, g# Version : All Version $ v2 D- y/ \* J/ O' X2 B2 X
#
5 F( l5 b3 m- ~& ]: o# Tested on : GNU/Linux Ubuntu - Windows Server - win7
) J- R/ k8 U! S5 V) \5 A) a% {#
2 K7 z3 {: \' h# Dork : intext:"Designed & developed by NetWays" / N N# p+ e, p$ e
#
& ^& H' y% K I################################################################################??########
* D) S$ W1 Z/ r& @8 b) L#
$ i) P# K/ l8 B$ g+ m: Z) j# Expl0iTs : 0 u2 t/ G G& o l
# 0 L, C% w3 C' \2 Z+ E, D
# http://target.com/news.php?id=[Sql] + i7 m* w9 F8 \ `. v
#
6 |& @9 r D( O9 f- ~& _# * U* c4 Y5 p# ^4 [ q& f
# D3mo :
) K) Q( H3 ]) _% G! [) y( L#
. R$ x7 ?* @1 V! [# http://compagnieparento.com/news.php?id=7[Sql]
6 \. k x" u/ s# 5 k \) v) E1 c6 G5 W# D; X
################################################################################??########
/ r0 }% E* u1 z' I4 D% @# % p) X ~* y+ {5 ` j
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r ]3 d, L6 w% z! F4 Z
# , j* m$ Z" ~1 w. J
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
1 w2 C F/ Y9 _% ]1 N#
# o* l# Q) O1 k5 y& Y. u# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
( Z9 t: F2 g! Q2 N; P# + _0 g* R1 Y0 K; i) v* q, ~& E
################################################################################??######## |