fso漏洞(这算不算绕过了权限|讨论)
假设目录没有权限
dim fso,UploadPath,CopyFile
Set fso = CreateObject("Scripting.FileSystemObject")
UploadPath = "\upload\"
Set CopyFile = fso.GetFile(Server.MapPath("\temp\abc.gif"))
CopyFile.copy Server.MapPath(UploadPath)
set fso = nothing
=========================
上面这种写法会显示
Microsoft VBScript 运行时错误 错误 '800a0046'
没有权限
修改:
UploadPath = "\upload\1111.gif" --->这里写个文件上去
??copy成功了!?
这太...明明没有文件还覆盖........
操作系统:windows2003