################################################################################??########
7 Y, W6 y! A% |% z+ }% H#
' _+ E" R) t. b* h5 A% B# u1 a# Exploit Title : Net Ways Cms Sql Injection Vulnerability
H( d" _7 }' F6 v' G#
) {6 }* Z* x0 v2 \; T5 m# Author : IrIsT.Ir ' {- G, m+ v# Y1 [5 u8 N
# # h6 D1 c3 Q2 p$ h- M
# Discovered By : Am!r ; w* m/ v4 A# Q+ W
# ( D& g3 N* G. B# ]0 U% p' W
# Home : http://IrIsT.Ir/forum : I6 R2 X* }/ S, F' @/ B5 C
# - n9 g' A9 \" u1 G* {: v
# Software Link : http://www.netways.com/ www.political-security.com- ]7 D9 Q' X. A1 Y, L: x
#
9 X/ G0 o' R0 D9 o0 M1 f" H' p# Security Risk : High 3 }0 L6 V$ G" B. J& }
# 6 B- z0 x1 k& @/ O" m) R
# Version : All Version
4 |+ d8 B- E9 D( t. [; o# O2 y8 V3 K#
8 U$ b0 R( {, @! R" U. S, x# Tested on : GNU/Linux Ubuntu - Windows Server - win7 1 V3 A/ Z( W& f
# ' }: Q! x8 g* ^+ I- }7 }
# Dork : intext:"Designed & developed by NetWays" 4 {! q1 b( R2 V8 T
#
% \: V" e k3 d) h1 d+ x: T################################################################################??########
* F9 x- S$ j& i! U/ @' M1 w9 _8 D#
* F# G: }& l1 L5 q9 N# Expl0iTs :
0 x2 ?6 e5 P3 t2 B7 ~, j#
/ Z8 d9 X& x! ^. Y# ]3 t9 X# http://target.com/news.php?id=[Sql] 3 y2 y4 e! h- h; E2 h7 _6 h/ W
# # _- }) H) L% y$ F
# 7 y2 z3 n" k: |( u6 o+ Z: s
# D3mo :
0 I- H( s# D: J8 t$ D. F3 G4 k/ l#
3 u, y! k0 [$ |# http://compagnieparento.com/news.php?id=7[Sql] / N- F/ r0 r+ N: ?" j, I
# R9 Z1 j+ b' Y# k! E a
################################################################################??########
; Q& G; v! U x5 k2 m( }* c/ e% W! O#
& |4 D8 a1 s( x5 n$ H! q# Greats : B3HZ4D - nimaarek - Dead.Zone - C0dex - SpooferNinja - TaK.FaNaR - Nafsh - BestC0d3r " a# W B* f% k% R5 m) M
#
# u; R: n) M; G* }5 e+ |# 0x0ptim0us - TaK.FaNaR - m3hdi - F@rid - Siamak.Black - H4x0r - dr.tofan - skote_vahshat - d3c0d3r
1 [1 e. o. `0 }# & l! o" b4 _( E( R1 G5 B5 T
# Mr.Xpr & M.R.S.CO & Mr.Cicili & H-SK33PY & All Members In Www.IrIsT.Ir/forum
) {$ L3 D: f+ w#
( }! x2 c! x, j ?################################################################################??######## |