FCK creates a new file and breaks through the underline

Fck editor should have met all directories !! However, when you create a 1. asp folder, it will be renamed.

 

1_asp here we use fiddle to break through!

Open fiddle breakpoint (f11)

 

It will automatically truncate the data and will not send it to the server. Then we will create a 2. asp folder in the browser.

We captured the data and modified it!

Modify the submitted form!

 

 

To create a folder/2.asp

Then, cancel the breakpoint.

Send it later

 

Then refresh our fck editor.

 

After the resolution is successful, I won't say much about the parsing vulnerability of iis6.0. Upload a jpg horse to parse it.