Rocket LMS存在默认口令

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Yucaerin/RocketLms
• https://pentest-tools.com/vulnerabilities-exploits/rocket-lms-default-login_27288
• https://s4e.io/tools/rocket-lms-default-login-detection-scanner
• https://babiato.tech/t/rocket-lms-learning-management-academy-script-untouched.82195/
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/default-logins/rocketlms/rocketlms-default-login.yaml
• https://www.youtube.com/watch?v=_jUnzZI0Opo

Related Vulnerabilities

• Rocket.Chat /api/v1/livechat/sms-incoming/twilio 服务器端请求伪造漏洞（CVE-2024-39713）
• PoCCVE-2025-32355: Rocket TRUfusion Enterprise - Server Side Request Forgery
• PoCwordpress-rocket-lazy-load-fpd: WordPress LazyLoad Plugin - Full Path Disclosure
• PoCCVE-2020-28208: Rocket.Chat <3.9.1 - Information Disclosure
• PoCCVE-2021-22911: Rocket.Chat <=3.13 - NoSQL Injection
• PoCCVE-2024-39713: Rocket.Chat - Server-Side Request Forgery (SSRF)
• PoCCVE-2023-33246: RocketMQ <= 5.1.0 - Remote Code Execution
• PoCCVE-2023-33246: RocketMQ broker unauthorized
• PoCCVE-2023-37582: Apache RocketMQ 远程命令执行漏洞
• PoCrocketlms-default-login: Rocket LMS - Default Login
• PoCrocketchat-unauth-access: RocketChat Live Chat - Unauthenticated Read Access
• PoCCVE-2023-37582: Apache RocketMQ - Remote Command Execution
• PoCapache-rocketmq-broker-unauth: Apache Rocketmq Broker - Unauthenticated Access