某政府在用系统任意文件上传getshell

简要描述： 某政府在用系统任意文件上传getshell 详细说明： 问题厂商:深圳太极软件有限公司 一套专门的政务服务系统 该系统的使用量非常大。由于该系统的fckeditor版本教老，可直接上传任意文件至服务器 /FCKeditor/editor/filemanager/connectors/jsp/upload.jsp?Type=File 保持如下内容为upload.htm 上传任意文件即可 None...

BOBO official web presence of any of the files to upload(find the predecessor traces)-vulnerability warning-the black bar safety net

BOBO's official website FCKeditor editor vulnerability Address: http://www.bobobaby.com.cn/fckeditor/editor/fckeditor.html ! newscreen60214718.jpg FCKeditor upload vulnerability a long time, it does not write method. Found to have someone pass the shell. Go a back door.... ! newscreen59758890.jpg...

SA-CONTRIB-2014-098 - CKEditor - Cross Site Scripting (XSS)

The CKEditor module and its predecessor, FCKeditor module allows Drupal to replace textarea fields with CKEditor 3.x/4.x FCKeditor 2.x in case of FCKeditor module - a visual HTML editor, sometimes called WYSIWYG editor. Both modules define a function, called via an ajax request, that filters text...

jom3aco SQL Injection

jom3aco new SQL Injection Vulnerability ======================================= Author : indoushka Vondor : http://www.jom3a.com Dork : show.php?do=viewsubject&id=&ids= ========================== SQL Injection : http://localhost/www/show.php?do=viewsubject&id=&ids=14 inject her Fckeditor Upload :...

Fckeditor Common Vulnerability of the excavation with the use of a finishing summary-vulnerability warning-the black bar safety net

View Editor Version FCKeditor/whatsnew.html ------------------------------------------------------------- 2. Version 2.2 version Apache+linux environments in the upload files back plus a. Breakthrough! Test passed. ------------------------------------------------------------- 3. Version =2.4.2 Fo...

EditorMonkey - (FCKeditor) Arbitrary File Upload

The editormonkey WordPress plugin was affected by a FCKeditor Arbitrary File Upload security vulnerability...

FCKeditor Deans With Pwwangs Code <= 1.0.0 - Remote Shell Upload

The deans-fckeditor-with-pwwangs-code-plugin-for-wordpress WordPress plugin was affected by a Remote Shell Upload security vulnerability...

Achievo <= 1.3.2 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- Achievo = 1.3.2 fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

jmd-cms - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote...

cardinalCms 1.2 (fckeditor) Arbitrary File Upload Exploit.

No description provided by source. ========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location...

osCMax 2.0 (fckeditor) Remote File Upload

No description provided by source. Title: osCMax 2.0 fckeditor Remote File Upload Vendor: http://www.oscdox.com Dork: Powered by osCMax v2.0 , Copyright @ RahnemaCo.com AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisor...

douran portal <= 3.9.0.23 Multiple Vulnerabilities

No description provided by source. Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal is not affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not fully...

xt:Commerce Shopsoftware (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source...

GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source. db 88 88 ,ad8888ba, d88b 88 88 d8' 8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 8888 88 88888 d88b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 Y88888P Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net...

Acidcat CMS 3.3 - (fckeditor) Shell Upload Vulnerability

No description provided by source...

Site@School <= 2.4.10 (fckeditor) Session Hijacking / File Upload Exploit

No description provided by source. ?php / ------------------------------------------------------------------------- Site@School = 2.4.10 fckeditor Session Hijacking / File Upload Exploit ------------------------------------------------------------------------- author...: EgiX mail.....:...

Dokeos LMS <= 1.8.5 (include) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Dokeos LMS = 1.8.5 include Remote Code Execution Exploit Description --------------------------------------------------------------- Dokeos LMS contains one flaw that allows an attacker to include a local file with html extension. The issue is due...

La-Nai CMS <= 1.2.16 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / -------------------------------------------------------------- La-Nai CMS = 1.2.16 fckeditor Arbitrary File Upload Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

ASPMass Shopping Cart - Vulnerability File Upload CSRF

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec Inc Public Advisory Title : ASPMass...

businesswiki 2.5rc3 - Stored XSS & arbitrary file upload

No description provided by source. !/usr/bin/python ''' Exploit Title: Stored XSS & Arbitrary File Upload Vulnerabilities in BusinessWiki. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://onbusinesswiki.com/ Software Link:...