FCK editor explosion absolute path

Haha night cat paper has wood !!!
 
This editor vulnerability has been found in some forums and is not easy to write. I don't know whether you have met this path ..
 
I just discovered that this stuff was not used for private sharing.
 
Such as the problem of explosive path. The principle should be similar to other brute-force paths, which are the absolute paths that make him fail
 
Let's just talk about it ..
 
First, you can find a test.html or local connection. The principle is the same.
 
 

 
Www.2cto.com does not need to create a directory. directly enter an ASP. ASP file under Current Folder to jump to this directory, and an error occurs.
 
Then, you can upload an image path. After the local test is successful
 
 
 
In this way, the path is exposed.

From: Fa ke Forum Author: piaoker