PT-2018-14879

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue allows remote attackers to list .txt files via a direct request for the "/data/0/admin.txt" API endpoint. Recommendations For LAOBANCMS version 2.0, consider restricting access to the /data/0/admin.tx...