Skip to content
Laobancms vulnerabilities
Newest
-
laobancms
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by...
CVE-2020-18167
4.8 Medium
-
laobancms
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by...
CVE-2020-18166
9.8 Critical
-
laobancms
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by...
CVE-2020-18165
4.8 Medium
-
laobancms
LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.
CVE-2018-19328
9.8 Critical
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti...
CVE-2018-19229
5.4 Medium
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows arbitrary file deletion via ../ directory...
CVE-2018-19228
7.5 High
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/liuyan.php neirong[]...
CVE-2018-19227
5.4 Medium
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a...
CVE-2018-19226
5.3 Medium
-
laobancms
An issue was discovered in LAOBANCMS 2.0. admin/mima.php has CSRF.
CVE-2018-19225
8.8 High
-
laobancms
An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and...
CVE-2018-19224
7.5 High
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the first input field to the admin...
CVE-2018-19223
4.8 Medium
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows a /install/mysql_hy.php?riqi=0&i=0 attack to...
CVE-2018-19222
9.8 Critical
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php...
CVE-2018-19221
9.8 Critical
-
laobancms
An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP...
CVE-2018-19220
9.8 Critical