PT-2018-14918

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue allows for directory traversal via the riqi parameter in the install/mysql hy.php endpoint. Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider restricting access to the...

PT-2018-14875

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue in LAOBANCMS allows an attack via the "install/mysql hy.php" endpoint with specific parameters, riqi and i, set to 0, enabling the reset of the admin password even when the install.txt file exists...