################################################################################??########
) s o s9 \, w" A# Q2 C* M8 j/ K#
" u: h6 \2 K1 C& |( I# Exploit Title : Net Ways Cms Sql Injection Vulnerability
S6 f" I- {% ~. C9 m( f( f4 \#
1 l/ V8 b% _! h7 ?: C8 S( P# Author : IrIsT.Ir 7 O7 T* d( p) Q8 t/ S3 h
#
& ~! Z B, l0 L6 D2 J# Discovered By : Am!r 2 v% D" l0 N% J4 x y) Q
#
* A T3 f4 z* ^% Q- J1 g# Home : http://IrIsT.Ir/forum 2 A3 h5 ^# P2 G$ l5 p4 ]( t
# : \+ T+ k5 l- B$ D% k
# Software Link : http://www.netways.com/ www.political-security.com9 O8 N! }. ]$ d* |! h
# ( t! i' q& Q. a) v0 I9 q0 R
# Security Risk : High 7 e- E4 j, D: C/ m9 s( W9 p: N7 w
# 2 c, n2 X+ m5 L3 ], Q) ]
# Version : All Version + Q3 D) B8 u# N/ ]! j, y
#
! T, n* n& V. R1 U* D3 Q# Tested on : GNU/Linux Ubuntu - Windows Server - win7
+ s/ g/ S$ [* _$ Z3 J: |# |- e#
4 _' Z9 p% x' W7 x4 \# Dork : intext:"Designed & developed by NetWays"
1 x! t7 v8 E& [, o" {& a( X. f6 E# ! ?" E, t9 q( e9 I& X8 v
################################################################################??######## ) w7 \& @! ]$ O; @
#
4 n& h0 D3 p, d9 C$ J$ v# Expl0iTs : % O0 W& H. b% k3 I2 u
#
3 h1 ]3 m. O! f/ r9 r( t7 D# h# http://target.com/news.php?id=[Sql]
! Q$ H& P+ U* E! B- h6 ~# . W0 }# m; d$ i/ m0 N# m4 C
#
( R6 I C) I+ V+ @& M, V# D3mo :
. a. e9 t5 p& i( e# 0 b: f' v5 C& U" q
# http://compagnieparento.com/news.php?id=7[Sql] ( V3 {9 K5 w6 U- S
# / g- j% |5 Z8 b
################################################################################??######## 2 f& j$ Y1 Q' y8 p* j
#
1 V7 Y3 O2 p1 G1 [6 T# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
# L& X& L' [, x9 _) _# 5 e% {- A! l1 J0 |5 `( ~$ `; v
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ! d5 a6 Z* R; @# I3 } O) F
# + s; b% z$ t+ c$ l0 Y9 @" q8 n
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum 0 ` A; e( ]1 G: ]# S
#
& o6 y8 f) J$ w4 C################################################################################??######## |