References https://www.cnblogs.com/0daybug/p/12786036.html https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/PbootCMS/PbootCMS%20v2.0.7%20%E9%BB%98%E8%AE%A4%E6%95%B0%E6%8D%AE%E5%BA%93%E4%B8%8B%E8%BD%BD/ https://disk.scan.cm/All_wiki/%E5%90%84%E7%B1%BB%E6%8A%80%E6%9C%AF%E6%96%87%E7%8C%AE%2B%E5%90%AB%E9%9B%B6%E7%BB%842021-07%E6%9C%88%E5%89%8D%E6%89%80%E6%9C%89%E6%96%87%E7%AB%A0Markdown%E7%89%88/library/003-%E6%BC%8F%E6%B4%9E%E7%9B%B8%E5%85%B3/100-PbootCMS/005-PbootCMS%20v2.0.7%20%E9%BB%98%E8%AE%A4%E6%95%B0%E6%8D%AE%E5%BA%93%E4%B8%8B%E8%BD%BD.md https://note-hxlab.wetolink.com/share/ALC1iSa8J56A https://github.com/chaitin/xray-plugins/blob/main/poc/manual/pbootcms-database-file-download.yml https://cloud.tencent.com/developer/article/2469612 https://www.pbootcms.com/ https://github.com/pbootcmspro/PbootCMS
Related Vulnerabilities上海小羚羊软件股份有限公司小羚羊ERP系统downloadView存在任意文件读取漏洞仁和兴业(深圳)软件有限公司仁和云ERP attachmentdownloadAttachment 接口存在任意文件读取漏洞PoCCVE-2026-67208: Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console玉帛软件仓库管理系统DownloadFile存在任意文件读取漏洞安科瑞EMS企业微电网能效管理平台 /SubstationWEBV2/main/appDownload 文件读取漏洞云连ERP管理系统 /gateway/download!download.action 代码执行漏洞泛微 e-cology10 /papi/em/transform/downLoadSyslog 文件读取漏洞PoCCVE-2026-56782: Gorse < 0.5.10 - Unauthenticated Database Dump方向标邮件网关 /common/cgi/download.cgi 代码执行漏洞通天星CMSV6车载视频监控平台 /808gps/StandardLoginAction_downLoad.action 文件读取漏洞天地伟业 Easy7 /Easy7/rest/downLoad/downLoadImage 文件读取漏洞PoCCVE-2021-4463: Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download金叶物联网大数据管理平台 /data/file/download 文件读取漏洞