Description
Unibox路由器 pms_check.php 存在远程命令执行漏洞，由于未对用户输入参数进行充分过滤和验证，攻击者可以通过构造特殊请求注入恶意系统命令。
Unibox路由器 pms_check.php 存在远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-6104
https://github.com/advisories/GHSA-q46m-9r94-rhrw
https://www.cvedetails.com/cve/CVE-2025-6104/
https://cert.kenet.or.ke/cve-2025-6104-wifi-soft-unibox-controller-os-command-injection-vulnerability
https://www.ameeba.com/blog/cve-2025-6104-critical-os-command-injection-vulnerability-in-wifi-soft-unibox-controller/
https://cve.imfht.com/detail/CVE-2025-6104?lang=en
https://vulners.com/cve/CVE-2025-6104
https://www.cvelogic.com/cve/CVE-2025-6104