################################################################################??######## + U+ e/ n0 h( A1 v" ]4 }8 c
#
' H3 C. l. f2 t0 C( t# Exploit Title : Net Ways Cms Sql Injection Vulnerability 3 y1 ]9 v5 U, q6 ^
#
( T/ o3 V) F, o" q+ C! S# Author : IrIsT.Ir $ i2 b/ a* G l4 Q0 G/ X: R
#
3 A3 r" b7 v: j& R/ t7 R5 ~) I# Discovered By : Am!r
6 _; C! h4 h H1 L/ I1 X( E6 @# 4 j2 ?! |) d1 ~; m# T* Y
# Home : http://IrIsT.Ir/forum
/ C( I7 C7 c- a7 T$ c# 0 L+ {8 o& C/ y6 H$ ^3 T
# Software Link : http://www.netways.com/ www.political-security.com0 @! }# e" |" B7 a2 w
#
" w) ^, u7 y6 S5 T2 ~$ Z- i; K$ r# Security Risk : High , `- d' i3 R2 s+ g
# - B' u5 n5 J# U7 p: ?9 z
# Version : All Version
6 l) ^9 f; N2 M8 q3 a( M#
% f& J6 W. Y4 O, ]! g# Tested on : GNU/Linux Ubuntu - Windows Server - win7
7 T! n o6 V+ L% R3 y1 s+ e: r#
/ Z: F' F" t2 p1 ` B9 K" B# Dork : intext:"Designed & developed by NetWays"
$ o$ i7 r& ]; U2 }! ?0 ~#
" I, \) `6 w" I2 l, q################################################################################??######## ) T4 ^) D, ?" ?( C. J- h
# ! N- G; ^; g# Q3 n8 {
# Expl0iTs :
0 b/ w5 M9 ?4 l6 |9 a#
$ x0 ~! ~* x0 O: {+ F( o# http://target.com/news.php?id=[Sql] 1 ?* _! E* s) y7 l' F0 t& ?
# 6 _+ b( s2 d0 y6 ?* _
#
" m+ B$ X# s; Y7 B# D3mo : ( g8 t" @3 @; ], w' b% n3 F
#
+ {8 {7 [6 D5 r" e+ ~* a4 D4 q( i# http://compagnieparento.com/news.php?id=7[Sql] $ X& I1 v; M2 h' [7 G
#
9 e j( m8 D3 o% g+ p0 R0 z################################################################################??######## ! C; L( P8 Y* U' I
# ) L; A# e% M3 ~. u
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
0 ` y Y3 w9 G( Q# q#
+ u' Z1 C0 m9 n4 G1 G3 y# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r ' o( X; v# h- E5 a
# " L. j D2 I9 }: X! a
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
' w) ]. E& j& h* ?# , y- Y7 e6 T- I9 O* M7 y- V; M
################################################################################??######## |