EIP-2026-105178
PRE-CVEAneCMS 1.0 - 'index.php' Multiple HTML Injection Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-105178. PoCs published by pratul agrawal.
AI-analyzed exploit summary This is a functional proof-of-concept for a persistent XSS vulnerability in AneCMS 1.0. The exploit demonstrates how an attacker can inject malicious JavaScript into the 'ADD LINKS' field, which is then stored in the database and executed when rendered.
Description
AneCMS 1.0 - 'index.php' Multiple HTML Injection Vulnerabilities
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by pratul agrawal · textwebappsphp
https://www.exploit-db.com/exploits/33748
This is a functional proof-of-concept for a persistent XSS vulnerability in AneCMS 1.0. The exploit demonstrates how an attacker can inject malicious JavaScript into the 'ADD LINKS' field, which is then stored in the database and executed when rendered.
Classification
Working Poc 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:
AneCMS 1.0
Auth required
Prerequisites:
Access to the admin module of AneCMS
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026