CVE-2020-18167

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

CVE-2020-18167

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

CVE-2020-18167

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

CVE-2020-18167: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

PT-2021-3414

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue is related to Cross Site Scripting XSS that allows remote attackers to execute arbitrary code. This is achieved by injecting commands into the Homepage Introduction field of the component...

LAOBANCMS Cross-Site Scripting Vulnerability

LAOBANCMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in LAOBANCMS v2.0 that allows remote attackers to execute arbitrary code by injecting a command into the "Homepage Introduction" field of the component "admin/info.php?shuyu". field of the...