################################################################################??######## " [& y! K9 K9 M: E" |9 w5 b
#
# N$ y4 D0 ^3 Y# Exploit Title : Net Ways Cms Sql Injection Vulnerability
* k4 d4 F/ G$ P- H/ {0 f# 0 H8 w0 p* T/ D" M; c: I
# Author : IrIsT.Ir ; S2 ]2 C' s/ D5 K
# : E# }6 ]8 y& K# ~- \. g
# Discovered By : Am!r
# Z' r% H) J {* t#
* s5 g6 ] R. K# Home : http://IrIsT.Ir/forum 3 B% T0 T& h! P7 `: h/ W
# E- W! T6 C# r* o
# Software Link : http://www.netways.com/ www.political-security.com8 Z- ~% m. Y. G0 X! ^/ K" o
#
4 x8 g& n8 Q2 ^# L; T8 d% a5 a# Security Risk : High 0 ^5 x+ n* R ]: Z( I
# % @9 b: P" x [/ [# }6 K; m
# Version : All Version
6 ^6 C; n" L& {8 S# w1 [3 F# ( k9 E& a! s$ N/ \ V4 c
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 , h0 M3 B! Y A* h
# ) g: \: j4 Y" x* W. x2 v0 P
# Dork : intext:"Designed & developed by NetWays" 7 ~- Q& k4 V. i$ o( a& |
# 4 P' U9 e! l. R2 y9 W/ h) x' F
################################################################################??######## & @% A& |& B. [4 I
#
( J. q7 \, [9 R7 J1 n# Expl0iTs : * y. G+ R) D! _: ~6 \
#
: @8 B, E" T4 _& F9 I4 D# http://target.com/news.php?id=[Sql]
% n1 i8 B) x5 U1 n% o$ Z/ Q% @( j#
: u# L: D( _9 y* c! K3 v" J# # s+ _1 A! B3 ^; J6 K
# D3mo :
( c+ i( F7 x- f# H( f& k#
% o' g4 C0 j4 Y+ T/ p7 A# http://compagnieparento.com/news.php?id=7[Sql]
4 h% n8 q1 {$ @8 o$ r& p+ q; h# @# 6 |2 q/ A( u" j7 Y
################################################################################??########
' I9 u- Z2 l ]" t, H7 W#
* B* x- a3 g$ n2 g; [# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r 6 h! n3 ^, @2 E6 f. C" \0 A- V! t
# ( X/ y$ a4 d ~1 K# ]
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
! e0 X) ]. D0 N#
0 D2 D8 l" |/ J' |) @3 S0 p2 I6 F# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
) G; D! M$ X( a#
% v1 J, }/ L3 f3 J: s5 T: Z################################################################################??######## |