CVE-2018-19226: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI...