扫一扫
分享文章到微信
扫一扫
关注官方公众号
至顶头条
这种漏洞满天下都是 当然我们用的一个程序也不例外 顺便表示我是php文盲 人都是逼出来的啊~我们需要做的是将重命名目录 重命名文件 建立目录都注释掉 很简单 看看代码就知道了所有的函数都是抓包获取的 然后去文件中找 注释掉 下面我给出大家当然目录不一定就是这个路径 大家可以按照实际情况去寻找文件0x1 注释掉创建目录ckfinder\core\connector\php\php4\CommandHandler\CreateFolder.phpckfinder\core\connector\php\php5\CommandHandler\CreateFolder.php/*禁止创建新文件夹$sNewFolderName = isset($_GET["NewFolderName"]) ? $_GET["NewFolderName"] : "";$sNewFolderName = CKFinder_Connector_Utils_FileSystem::convertToFilesystemEncoding($sNewFolderName);if ($_config->forceAscii()) {$sNewFolderName = CKFinder_Connector_Utils_FileSystem::convertToAscii($sNewFolderName);}
if (!CKFinder_Connector_Utils_FileSystem::checkFileName($sNewFolderName) || $_resourceTypeConfig->checkIsHiddenFolder($sNewFolderName)) {$this->_errorHandler->throwError(CKFINDER_CONNECTOR_ERROR_INVALID_NAME);}
*/0x2注释掉重命名文件ckfinder\core\connector\php\php4\CommandHandler\RenameFile.phpckfinder\core\connector\php\php5\CommandHandler\RenameFile.php/*禁止重命名文件}
if (!isset($_GET["newFileName"])) {$this->_errorHandler->throwError(CKFINDER_CONNECTOR_ERROR_INVALID_NAME);}
*/0x3注释掉重命名目录ckfinder\core\connector\php\php4\CommandHandler\RenameFolder.phpckfinder\core\connector\php\php5\CommandHandler\RenameFolder.php/*禁止重命名文件夹if (!isset($_GET["NewFolderName"])) {$this->_errorHandler->throwError(CKFINDER_CONNECTOR_ERROR_INVALID_NAME);}
$newFolderName = CKFinder_Connector_Utils_FileSystem::convertToFilesystemEncoding($_GET["NewFolderName"]);$_config =& CKFinder_Connector_Core_Factory::getInstance("Core_Config");if ($_config->forceAscii()) {$newFolderName = CKFinder_Connector_Utils_FileSystem::convertToAscii($newFolderName);}
$resourceTypeInfo = $this->_currentFolder->getResourceTypeConfig();if (!CKFinder_Connector_Utils_FileSystem::checkFileName($newFolderName) || $resourceTypeInfo->checkIsHiddenFolder($newFolderName)) {$this->_errorHandler->throwError(CKFINDER_CONNECTOR_ERROR_INVALID_NAME);}
*/
