CVE-2022-44244

1. Use the root/123456 administrator account to obtain the token through the demo station
2. All users can be queried through the API interface document.
3. Find a lin-cms website
4. Write a request and use the token obtained in the demo station to obtain all users of the website.
5. Use this token to query your own permissions, which are displayed as root administrator permissions.
6. Another system validation