PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.