DotNetTextBox editor holes to upload arbitrary files

1. Use firebug to Change disabled = "disabled", value = "jgp, gif, and png" to enabled = "enabled", value = "jpg, gif, png, and aspx ", click "Update successful ".

2. The update is displayed successfully.

3. Refresh the page and find the image types that can be uploaded at this time. The aspx type is added successfully.

4. Find An aspx webshell file to upload and prompt that the file is uploaded successfully.

5. Upload succeeded and lie there successfully

6. webshell page

 

Solution:

You are more professional than me