Questions about absolute path of FCK editor vulnerabilities and Solutions

Comments: Path explosion problem. The principle should be similar to other explosive paths. Haha night cat paper has wood !!!
 
This editor vulnerability has been found in some forums and is not easy to write. I don't know whether you have met this path ..
 
I just discovered that this stuff was not used for private sharing.
 
Such as the problem of explosive path. The principle should be similar to other brute-force paths, which are the absolute paths that make him fail
 
Let's just talk about it ..
 
First, you can find a test.html or local connection. The principle is the same.
 
 

 
You do not need to create a directory and enter an ASP. ASP file under Current Folder to jump to this directory. Then, an error occurs.
 
Then, you can upload an image path. After the local test is successful
 
 
 
In this way, the path is exposed.

From: Fa ke Forum Author: piaoker