CVE-2020-18167

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

PT-2021-3414

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue is related to Cross Site Scripting XSS that allows remote attackers to execute arbitrary code. This is achieved by injecting commands into the Homepage Introduction field of the component...

CVE-2020-18167: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu"...

CVE-2020-18165: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu"...

PT-2021-3912

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue is related to Cross Site Scripting XSS that allows remote attackers to execute arbitrary code. This is achieved by injecting commands into the Website SEO Keywords field on the page...