PT-2018-14918

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue allows for directory traversal via the riqi parameter in the install/mysql hy.php endpoint. Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider restricting access to the...