mirror of
https://github.com/gobysec/GobyVuls.git
synced 2025-05-07 19:16:32 +00:00
9 lines
325 B
Markdown
9 lines
325 B
Markdown
|
# PbootCMS parserIfLabel RCE
|
||
|
|
|
||
|
|
A Remote Code Execution vulnerability exists in parserIfLabel function. Exploit demand: PbootCMS 3.0.1-3.0.4, PHP >= 7.0, system() function is not forbidden.
|
||
|
|
|
||
|
|
**FOFAquery rule**: [app="PBOOTCMS"](https://fofa.so/result?qbase64=YXBwPSJQQk9PVENNUyI%3D)
|
||
|
|
|
||
|
|
# Demo
|
||
|
|
|
||
|
|
|