CVE-2018-19328

LAOBANCMS 2.0 allows install/mysqlhy.php?riqi=../ Directory Traversal...

PT-2018-14918

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description The issue allows for directory traversal via the riqi parameter in the install/mysql hy.php endpoint. Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider restricting access to the...