################################################################################??######## , G; m% r: A! w" P$ K. _. d. Q
# & G' E- @5 l, ]4 k1 q- r
# Exploit Title : Net Ways Cms Sql Injection Vulnerability h+ C7 U V2 c1 O7 w
# # N o6 p' i9 s
# Author : IrIsT.Ir
3 }' U& C$ w5 S4 y, q9 |#
& Q- [. M6 B8 l4 ^0 _- z5 U. {# Discovered By : Am!r . H; b8 A3 Q+ ^- B( l8 P
# 1 L9 Y# ~8 D* x3 k- L
# Home : http://IrIsT.Ir/forum
9 b x) d2 Q9 ^: n6 Y" g#
% v0 E1 X1 P- O* F" w! ?* d# Software Link : http://www.netways.com/ www.political-security.com
8 W, P& ]6 I0 w; `" h# 3 }* ]& r; g% z* f
# Security Risk : High
6 N* G2 H$ d' P" {5 W1 ^# 5 t' v3 W4 \. n5 H9 s6 K
# Version : All Version & w* W% C" Y" a# X
# + n& V. e) @6 i: m/ _
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
% Q& c) W$ v' W# I- s1 a" n4 X1 D/ b+ L3 v2 d
# Dork : intext:"Designed & developed by NetWays" ( D1 ~. A& l# n- H/ E( s
# / O/ u M- x( P/ e' _8 A9 b8 P
################################################################################??######## " m3 d9 n! @" V6 C
#
# I0 R$ K6 L- J, c# Expl0iTs : 1 }) @+ f; V, E/ q, Q* r# u" | S
# / r$ G) R/ {0 z5 c
# http://target.com/news.php?id=[Sql]
# X& \$ o9 }; W4 S. D; ]( n# ( \# r' L4 ?+ O+ O
#
% ~6 s2 r: \; O R( D& ?% Z# D3mo : : |- W1 w7 p" [. m% _( X# C' W
#
' z, T4 X+ N$ E, w0 T# http://compagnieparento.com/news.php?id=7[Sql] 2 n3 t1 J- _0 U. Y) }4 j% a
#
4 w& _! g+ D n5 _+ n################################################################################??########
. {8 f7 [/ \- l* O# * j( `5 s5 B0 [7 \' ^/ i" Y
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r ! }! S4 m! t# `5 ?% \& t
# 0 I9 l/ P5 C, b5 a1 ^* i6 [
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
$ e3 p& @$ F1 K; h( I |) N#
6 {6 i6 b7 c3 ]7 Y! g& l# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
v; P4 H* j$ I2 Q- _0 Z5 V+ x#
5 }& t6 `0 C8 V. V* u" N' T################################################################################??######## |