References https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/PbootCMS/PbootCMS%20v2.0.7%20%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%E6%BC%8F%E6%B4%9E/ https://m.lol9.cn/view.php?aid=11305 https://www.sentinelone.com/vulnerability-database/cve-2026-4509/ https://zhuanlan.zhihu.com/p/690327263 https://github.com/Threekiii/Awesome-POC https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/PbootCMS/PbootCMS%20v3.0.1%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/ https://www.cnblogs.com/seozimt/p/19855318 https://susec.me/2021/11/22/pboot-cms-V3-1-2-%E8%99%9A%E5%81%87%E7%9A%84%E6%97%A0%E6%96%87%E4%BB%B6%E8%90%BD%E5%9C%B0RCE/ https://app.opencve.io/cve/?vendor=pbootcms
Related VulnerabilitiesPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginFlowise /api/v1/loginmethod 未授权访问漏洞(CVE-2026-56270)PoClitellm-default-login: LiteLLM - Default LoginPoCnet-vision-default-login: Net Vision UPS Monitor - Default LoginPoC3xui-default-login: 3X-UI - Default LoginPoC泛微E-cology10 /papi/passport/appnew/login/appLogin 未授权访问漏洞WordPress /wp-login.php 跨站脚本攻击漏洞(CVE-2026-64638)ZKTeco BioTime 平台 /accounts/login 默认口令漏洞PoCsentinel-default-login: Alibaba Sentinel - Default LoginPoC9router-default-login: 9Router - Default LoginPoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞Datart /api/v1/users/login 默认口令漏洞