A vulnerability in the Fckeditor editor has been detected on a certain site. OK, let's go straight to the tool.
You can see directories, create folders, and upload files.
The server is IIS6, upload a sentence, xx.asp; 1.gif, but what I got after uploading is like this.
After the visit, I was intercepted by the security dog, thinking that I had been killed, so I found a safety dog and uploaded it, and it was still the same. After careful analysis, it was a problem with the incoming parameters, so a xx.asp.jpg horse was uploaded, and it was successfully uploaded.
The kitchen knife is directly connected and taken down.
|
Posted on 4/13/2015 11:01:34 AM
|
|
|
|
Landlord|
Posted on 4/13/2015 10:34:04 PM
|
