CVE-2018-19229

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter...

CVE-2018-19229: Improper Neutralization of Input During Web Page Generation

An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter...

PT-2018-14882

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue was discovered that allows XSS via the "admin/art.php?typeid=1" endpoint, specifically through the biaoti parameter. Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider...