PT-2018-14880

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue was discovered that allows XSS via the neirong parameter in the "admin/liuyan.php" endpoint. Recommendations For LAOBANCMS version 2.0, consider restricting access to the neirong parameter in the...

CVE-2018-19227: Improper Neutralization of Input During Web Page Generation

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong parameter...