An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.Referenceshttps://blog.mo60.cn/index.php/archives/kodbox_Logical.html