99 matches found
LAOBANCMS 跨站脚本漏洞
LAOBANCMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in LAOBANCMS v2.0 that allows remote attackers to execute arbitrary code by injecting a command into the "Homepage Introduction" field of the component "admin/info.php?shuyu". field of the...
CVE-2020-18165
Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...
CVE-2020-18165
Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...
Cross site scripting
Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...
CVE-2020-18165
CVE-2020-18165 affects LAOBANCMS v2.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page admin/info.php?shuyu. The available connected documents confirm the affected...
LAOBANCMS 跨站脚本漏洞
LAOBANCMS is a content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in LAOBANCMS version 2.0. An attacker can execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the "admin/info.php?shuyu" page...
Directory traversal
LAOBANCMS 2.0 allows install/mysqlhy.php?riqi=../ Directory Traversal...
CVE-2018-19328
LAOBANCMS 2.0 allows install/mysqlhy.php?riqi=../ Directory Traversal...
CVE-2018-19328
LAOBANCMS 2.0 allows install/mysqlhy.php?riqi=../ Directory Traversal...
CVE-2018-19328
LAOBANCMS 2.0 allows install/mysqlhy.php?riqi=../ Directory Traversal...
CVE-2018-19328
CVE-2018-19328 affects LAOBANCMS 2.0 and is described as a directory traversal via install/mysql_hy.php?riqi=../. The connected records confirm the vulnerability class (directory traversal) and provide CVSS metrics: CVSS‑3.0 base score 9.8 (CRITICAL) with impact on confidentiality, integrity, and...
LAOBANCMS Arbitrary PHP Code Execution Vulnerability
Laoban CMS LAOBANCMS content management system is based on PHP + MYSQL environment developed by the old class of open-source website building system . LAOBANCMS 2.0 has an arbitrary PHP code execution vulnerability. Remote attackers can install/ URI through the host parameter to exploit the...
LAOBANCMS Cross-Site Request Forgery Vulnerability
Laoban CMS LAOBANCMS content management system is based on PHP + MYSQL environment developed by the old class of open-source website building system . A cross-site request forgery vulnerability exists in admin/mima.php in LAOBANCMS 2.0, which can be exploited by attackers to perform unauthorized...
CVE-2018-19223
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin/type.php?id=1 URI...
CVE-2018-19224
An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...
CVE-2018-19229
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter...
Default credentials
An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysqlhy.php?riqi=0&i=0 attack to reset the admin password, even if install.txt exists...
CVE-2018-19220
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI...