相关漏洞推荐 POC CVE-2017-11107: phpLDAPadmin <= 1.2.3 - Reflected XSS POC CVE-2019-9082: ThinkPHP < 3.2.4 - Remote Code Execution POC phpmyadmin-fpd: phpMyAdmin Full Path Disclosure POC wp-custom-post-type-ui-fpd: WordPress Custom Post Type UI - Full Path Disclosure phpMyFAQ /api/setup/backup 信息泄露漏洞(CVE-2025-69200) PHP 安全漏洞 ERPNext /api/method/erpnext.crm.doctype.contract_template.contract_template.get_contract_template SQL 注入漏洞(CVE-2025-66435) ERPNext /api/method/erpnext.accounts.doctype.dunning.dunning.get_dunning_letter_text SQL 注入漏洞(CVE-2025-66434) 深圳致软信息技术有限公司致软金店无忧智能店铺管理系统getCodetype.do type参数存在 SQL注入漏洞 POC CVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE) POC CVE-2023-38875: PHP Login System 2.0.1 - Cross-Site Scripting POC functions-php-disclosure: functions.php Full Path Disclosure POC CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS