Description
由于该系统身份认证存在缺陷，允许攻击者利用漏洞构造包含恶意指令的特殊请求，获取管理员的账号密码等信息进入后台。
安友固定资产管理存在身份绕过
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2025-10438.html
https://cn-sec.com/archives/4827037.html
https://zhuanlan.zhihu.com/p/1990942848875528611
https://www.gm7.org/archives/32778
https://vip.bdziyi.com/author/1/page/1098/?tab=post&status=forum_post&orderby=comment_count
https://zone.ci/e/tags/index.php?page=13&tagname=%E6%BC%8F%E6%B4%9E%E9%A2%84%E8%AD%A6&line=25&tempid=11