中国网络渗透测试联盟

标题: fckeditor漏洞 [打印本页]
作者: admin    时间: 2012-9-13 17:02
标题: fckeditor漏洞
+ f7 g6 r! N' V  I- Z8 m  i' S
fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
* X! ~3 h( M7 h# ^" jhttp://www.china-photo-model.com ... aspx/connector.aspx' E+ Q- G9 y. U: i% d+ L

8 Y0 K4 n7 R# u. i7 P5 g: Y' g7 c0 G% o
http://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector, T0 A3 E1 Q. m- V: U; I  h
9 o0 H: {$ s+ @" \
/ M% x. j1 A0 }0 M$ t

# h  ^( |7 u! E& F4 `) D
) u  I3 v! S6 Y1 s+ K
9 `3 u! H& m; p, W* G% W查看配置和列出目录下的文件.3 g$ T' I& e6 u/ |7 k
3 E" \$ [1 X6 _0 B9 c& G" g% t
0 R6 b' F( y! H4 T. h$ C
http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F- n7 y# f& X. ]
http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F0 S# [% ~( V% I* F- a
( a$ ^3 _" D7 p/ v
上传地址:! @3 b8 b# E* ]& r0 Q

) K4 x2 {. r, o; x' ]http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
. s, A5 z% t. H4 M/ Xhttp://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录



欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) Powered by Discuz! X3.2