大家看下这段代码 有什么漏洞

kyalin

一打开www.xxxx.com/swf/





代码如下

[AppleScript] 纯文本查看 复制代码

---SWFUpload Instance Info---
Version: 2.2.0 Beta 2
Movie Name: SWFUpload_0
Settings:
	upload_url:               upload.php
	flash_url:                swfupload/swfupload.swf?swfuploadrnd=799638670
	use_query_string:         false
	requeue_on_error:         false
	http_success:             
	file_post_name:           Filedata
	post_params:              [object Object]
	file_types:               *.*
	file_types_description:   All Files
	file_size_limit:          100 MB
	file_upload_limit:        100
	file_queue_limit:         0
	debug:                    true
	prevent_swf_caching:      true
	button_placeholder_id:    spanButtonPlaceHolder
	button_image_url:         images/TestImageNoText_65x29.png
	button_width:             65
	button_height:            29
	button_text:              <span class="theFont">浏览</span>
	button_text_style:        .theFont { font-size: 16; }
	button_text_top_padding:  3
	button_text_left_padding: 12
	button_action:            -110
	button_disabled:          false
	custom_settings:          [object Object]
Event Handlers:
	swfupload_loaded_handler assigned:  false
	file_dialog_start_handler assigned: false
	file_queued_handler assigned:       true
	file_queue_error_handler assigned:  true
	upload_start_handler assigned:      true
	upload_progress_handler assigned:   true
	upload_error_handler assigned:      true
	upload_success_handler assigned:    true
	upload_complete_handler assigned:   true
	debug_handler assigned:             true

SWF DEBUG: SWFUpload Init Complete
SWF DEBUG: 
SWF DEBUG: ----- SWF DEBUG OUTPUT ----
SWF DEBUG: Build Number:           SWFUPLOAD 2.2.0 Beta 2 2008-10-28
SWF DEBUG: movieName:              SWFUpload_0
SWF DEBUG: Upload URL:             upload.php
SWF DEBUG: File Types String:      *.*
SWF DEBUG: Parsed File Types:      
SWF DEBUG: HTTP Success:           0
SWF DEBUG: File Types Description: All Files (*.*)
SWF DEBUG: File Size Limit:        104857600 bytes
SWF DEBUG: File Upload Limit:      100
SWF DEBUG: File Queue Limit:       100
SWF DEBUG: Post Params:
SWF DEBUG:                         PHPSESSID=
SWF DEBUG: ----- END SWF DEBUG OUTPUT ----
SWF DEBUG: 

大神看一下 可以任意上传文件不？？

90_

兄弟你有问得时间，估计就已经可以试N遍了

kyalin

90_ 发表于 2015-7-10 22:01
兄弟你有问得时间，估计就已经可以试N遍了

不才  N遍也没成功