Cobub Razor 0.7.2 – Add New Superuser Account - 体验盒子

作者： ppb

日期： 2018-04-09

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

# Exploit Title: [Cobub Razor 0.7.2 Add New Superuser User]

# Date: [2018-03-07]

# Exploit Author: [ppb（ppb@5ecurity.cn）]

# Vendor Homepage: [https://github.com/cobub/razor/]

# Software Link: [https://github.com/cobub/razor/]

# Version: [0.72]

# CVE : [CVE-2018-7745]

There is a vulnerability that can add an admnistrator user without login.

update the url and save to html ，then open it.

<html>

<body>

</form>

</body>

</html>