Description
PbootCMS是一款基于PHP语言和MySQL数据库开发的开源CMS系统。PbootCMS存在远程代码执行漏洞，该漏洞是由于应用对请求中pboot:if标签的内容验证不当导致的。
PbootCMS pbootif 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/PbootCMS/PbootCMS%20v3.0.1%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/cms/PbootCMS-V3.1.2-%E6%AD%A3%E5%88%99%E7%BB%95%E8%BF%87-RCE-%E6%BC%8F%E6%B4%9E.md
https://www.anquanke.com/post/id/212603PbootCMS
https://guokeya.github.io/post/VL0ntICBC/
https://mvip.tophant.com/detail/1547797933173293058
https://www.sxxdckj.com/cms/a/PbootCMS-yuan-cheng-dai-ma-zhi-xing-lou-dong.html
https://susec.me/2021/11/22/pboot-cms-V3-1-2-%E8%99%9A%E5%81%87%E7%9A%84%E6%97%A0%E6%96%87%E4%BB%B6%E8%90%BD%E5%9C%B0RCE/
https://blog.csdn.net/c0529/article/details/139021344
https://www.cnblogs.com/-qing-/p/13494000.html
https://zhuanlan.zhihu.com/p/690327263