################################################################################??######## ! }6 Q% s/ a5 I" ` a% ] d5 G+ u4 ]
# 3 O: W2 P) H8 R" k: f5 Z" V! J
# Exploit Title : Net Ways Cms Sql Injection Vulnerability 1 n+ n: |, ~" N6 j
#
' j/ j, [- E z0 c1 g. d3 H# Author : IrIsT.Ir
2 a# b0 j( m7 m+ H6 S# # T' U! H6 B# F
# Discovered By : Am!r
; [+ ]# F6 l E& a) O, g0 x0 v: V' z# , \0 c5 ~0 p" E) I' n
# Home : http://IrIsT.Ir/forum 2 O- h5 c/ k. W1 y4 l# \
# 2 I4 |3 _- s4 y; O
# Software Link : http://www.netways.com/ www.political-security.com
p7 A- ?: n# K" p- J#
: p* {& J5 k# u0 P3 a& y# Security Risk : High
$ \3 |* a2 b$ D$ x% ^9 D2 W4 g5 X#
( N# v$ e" r- {& `* y* D# Version : All Version
/ a2 N; t4 l+ ~# , K6 \( N: }$ i! |7 N* M( B
# Tested on : GNU/Linux Ubuntu - Windows Server - win7 1 r: p( I' q% |$ _% Q0 l+ @
#
$ C1 L4 M+ H, Y d2 s# Dork : intext:"Designed & developed by NetWays" : N2 u$ U6 b7 N8 l# ]
# % \* j; w& p4 S8 G" C) A% }
################################################################################??########
- E0 U/ j1 g/ I# [+ v- `#
( ^* M+ o0 h6 F( }, y' h# Expl0iTs : / k& b8 L* }6 `. O& K: M
#
8 t9 t- y; w* }# http://target.com/news.php?id=[Sql]
9 I0 H5 N1 T- n& f# $ Q; A3 a, P8 l& U& u
# 4 o5 O, S0 Z# h6 N0 Q/ r
# D3mo : / O/ y) s# C/ u& j+ L) ]
#
# L3 v+ i7 B# j I; u) F- f0 J# http://compagnieparento.com/news.php?id=7[Sql] 0 i: U( R, ]. b- ~4 Y6 X
# % H) b' S5 L) K- `# L
################################################################################??######## ' G. l* @* J' n
# - r- F4 G- o4 q8 `' D
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
0 m) l; `1 h0 ?8 G# ) e% o3 p' d9 J5 s: u
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
9 `% t0 E# m& W! l+ q `9 q+ r5 C2 ^#
0 Q' U) Z: j, ?" D: |# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
/ y6 S! t9 q5 P) t; O#
4 ?$ P! q" Q( T5 b, `! |################################################################################??######## |