Arbitrary file deletion

2018-11-1220:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via …/ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation.

CPENameOperatorVersion
laobancmseq2.0

CPE	Name	Operator	Version
	laobancms	eq	2.0

References

github.com/AvaterXXX/laobanCMS/blob/master/1.md