CVE-2018-19225

Description

References

• AvaterXXX/laobanCMS · Exploit

laobancms의 다른 취약점

• CVE-2020-18167보통 4.8Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Intr…
• CVE-2020-18166심각 9.8Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension…
• CVE-2020-18165보통 4.8Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO K…
• CVE-2018-19328심각 9.8LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.
• CVE-2018-19229보통 5.4An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter.