Design/Logic Flaw

2018-11-1220:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI.

CPENameOperatorVersion
laobancmseq2.0

CPE	Name	Operator	Version
	laobancms	eq	2.0

References

github.com/AvaterXXX/laobanCMS/blob/master/1.md