CVE-2018-19228

An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation...

PT-2019-14982

Name of the Vulnerable Software and Affected Versions joyplus-cms version 1.6.0 Description The issue allows for absolute path traversal via the rootpath parameter in the manager/admin pic.php endpoint. Recommendations For joyplus-cms version 1.6.0, consider restricting access to the manager/admi...

PT-2018-14881

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue in LAOBANCMS allows arbitrary file deletion via directory traversal in the "admin/pic.php" endpoint, specifically using the del parameter. This can be exploited to delete sensitive files, such as...

CVE-2018-19228: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory traversal in the admin/pic.php del parameter, as demonstrated by deleting install/install.txt to permit a reinstallation...