CVE-2018-19228

Summary: CVE-2018-19228 affects LAOBANCMS 2.0 and involves an arbitrary file deletion vulnerability triggered by directory traversal in the admin/pic.php del parameter. Evidence shows an attacker can delete files (e.g., install/install.txt) by traversing ../, enabling a reinstallation path. The a...