CVE-2018-19222

2022-10-0316:21:55

mitre

www.cve.org

laobancms

security vulnerability

install

mysql_hy.php

admin password reset

cve-2018-19222

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

JSON

An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to reset the admin password, even if install.txt exists.

References

github.com/AvaterXXX/laobanCMS/blob/master/1.md#reset-admin-password