################################################################################??########
0 p8 P6 _2 W+ S% P1 k3 Q# 1 @% e; W3 q; }
# Exploit Title : Net Ways Cms Sql Injection Vulnerability $ p$ ~& f! }( p. @$ @8 V; ^
# / W" K* _2 [; d" r4 D9 |/ o
# Author : IrIsT.Ir : n! }" l3 @7 @
# - R& P i' r' C
# Discovered By : Am!r " K6 j" D( T: a5 [- L; h
#
; v- y$ P6 M/ [8 c$ z) b" A h9 N# Home : http://IrIsT.Ir/forum . o: s0 Q; P) C% s* k/ s$ d
# 2 c4 C/ K9 B) F: a' _6 l8 `7 [; s
# Software Link : http://www.netways.com/ www.political-security.com% }/ g( ?- J# M( h! M7 `
#
9 C! |; h+ ?0 v) s# Security Risk : High 9 ?' E+ ]$ [) F. q( `4 H
# 3 Y! V5 ~1 F9 `$ }" N
# Version : All Version 9 k" Z3 T6 }* }. p" m$ m1 A ~
#
* n. r0 H m, g5 k* l# Tested on : GNU/Linux Ubuntu - Windows Server - win7
' W/ Q% g# w) w4 x3 ^1 ^" O# ) D" C" x3 g6 \/ t$ c) a
# Dork : intext:"Designed & developed by NetWays" : O" B8 ^4 w. D2 @5 i& g$ S
# ; i& U; P& {& W& u3 h" c" y4 S' [
################################################################################??########
1 F- x& \6 w( P6 C0 w# i# & s8 `2 d7 \, [. w
# Expl0iTs :
: O% S# r" V8 Y# ! y& T; r$ @1 g4 |" F- o
# http://target.com/news.php?id=[Sql]
s. ^7 w) b3 M#
& f3 V* F4 O! h% r/ w# % f! `6 e5 Y& @; d" N" x9 s7 y
# D3mo :
~% A) d* w; J: a5 \, _#
1 b, {0 _; o' `- Y. B) j/ Z# http://compagnieparento.com/news.php?id=7[Sql] " `2 L) b# k5 K. n
# ( E) ~% k; I5 v! U- Z
################################################################################??######## 9 ~0 m7 s) N, {, W/ C. I8 L4 H' `
#
& Q5 o. R! p5 r- f; s f# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r 3 o4 o6 `; i/ Y! U+ p7 @
# 9 @9 z1 @6 U) } |/ |
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ) d, o4 m# Q0 w9 x$ ~) L8 z
#
- ]- ?/ n8 D, ? f# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
9 n# F: u$ k% n/ I) s#
- z2 S' e' q- d( j; _6 j+ r################################################################################??######## |