Description
Wifi-soft UniBox controller 路由器产品中存在一个致命漏洞，/billing/logout.php受命令注入漏洞的影响。未授权的攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个路由器。
Unibox路由器 /billing/logout.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/unibox-billing-logout-mac_address-rce.html
https://ddpoc.com/DVB-2025-9117.html
https://github.com/Mr-xn/Penetration_Testing_POC
https://vuldb.com/submit/590747
https://cert.kenet.or.ke/cve-2025-6103-wifi-soft-unibox-controller-os-command-injection-vulnerability
https://cve.imfht.com/detail/CVE-2025-6102?lang=en