fckeditor漏洞

admin

fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
+ N2 D+ l7 Z8 I6 i$ z$ _9 xhttp://www.china-photo-model.com ... aspx/connector.aspx
7 V2 g3 f. w7 W, V# x, A; X5 a. w6 M* V
. e3 D" U7 K8 U; n
6 r0 O& i, W9 Q* f9 f; Shttp://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector
) k& U5 |9 `; Q4 z
* v% R( u% G2 R! ~- c
5 Q, w$ Q" Y/ }
$ }4 }1 B' [+ N0 ~. u+ y% f( K. m6 |
/ z. E' s3 z# ]" l/ A6 ^+ Y+ {" v
  `' G( D) }/ a4 L# `  l' W; t1 b查看配置和列出目录下的文件.

6 q6 W1 M: g" m7 h2 `
3 N( v, _& |: K. c' o. ^9 uhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
/ I. v4 R$ q" u! @9 V0 F$ p& vhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F

6 g3 ~  I0 o; D2 {9 K) e) Y  A3 n4 A上传地址:

http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
http://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录