### 简要描述:
国内优秀的JAVA(JSP)内容网站管理系统.FCK上传漏洞
### 详细说明:
[<img src="https://images.seebug.org/upload/201205/091512001a30f002857408d0a2aae23808076855.jpg" alt="" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201205/091512001a30f002857408d0a2aae23808076855.jpg)
漏洞地址:
www.域名/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp
### 漏洞证明:
使用JEECMS系统的网站FCK漏洞地址:
1、中国物流信息中心:http://www.clic.org.cn/
http://www.clic.org.cn/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp
2、黑龙江发展改革委员会: http://www.hljdpc.gov.cn/
http://www.hljdpc.gov.cn/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp
3、晋城市政务大厅网站 http://zwdt.jconline.cn/
http://zwdt.jconline.cn/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp
4、北京注册会计师协会培训网 http://www.bicpaedu.com/
http://www.bicpaedu.com/thirdparty/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=connectors/jsp/connector.jsp
暂无评论