Laobancms

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Laobancms records in CISA KEV

No Laobancms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Laobancms 14 records MEDIUM

Records

14 records

TI-2018-13694 CVE-2018-19328 · GHSA-hw5h-j2w2-44c7

LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.

MEDIUM 46

LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2018-11-17 No fix listed CWE-22

TI-2020-13331 CVE-2020-18166 · GHSA-r856-wf39-mr22

Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary…

MEDIUM 45

Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc".

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01684 Published 2021-05-14 No fix listed CWE-434

TI-2018-13644 CVE-2018-19222 · GHSA-9wm2-f494-g6wj

An issue was discovered in LAOBANCMS 2.0.

MEDIUM 45

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01422 Published 2018-11-12 No fix listed CWE-79

TI-2018-13642 CVE-2018-19220 · GHSA-pqrv-4w4w-mgx5

An issue was discovered in LAOBANCMS 2.0.

MEDIUM 45

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0167 Published 2018-11-12 No fix listed CWE-94

TI-2018-13643 CVE-2018-19221 · GHSA-r9fh-x439-c62w

An issue was discovered in LAOBANCMS 2.0.

MEDIUM 44

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01202 Published 2018-11-12 No fix listed CWE-89

TI-2018-13647 CVE-2018-19225 · GHSA-7rrw-47f7-x4r5

An issue was discovered in LAOBANCMS 2.0.

LOW 39

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-11-12 No fix listed CWE-352

TI-2018-13650 CVE-2018-19228 · GHSA-hm3m-339q-q9mh

An issue was discovered in LAOBANCMS 2.0.

LOW 36

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01536 Published 2018-11-12 No fix listed CWE-22

TI-2018-13646 CVE-2018-19224 · GHSA-w2m4-xqg7-pfhg

An issue was discovered in LAOBANCMS 2.0.

LOW 35

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0098 Published 2018-11-12 No fix listed CWE-565

TI-2018-13648 CVE-2018-19226 · GHSA-jh3h-5626-4xq2

An issue was discovered in LAOBANCMS 2.0.

LOW 26

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01177 Published 2018-11-12 No fix listed CWE-200

TI-2018-13651 CVE-2018-19229 · GHSA-m5fv-j62c-q9hm

An issue was discovered in LAOBANCMS 2.0.

LOW 25

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00556 Published 2018-11-12 No fix listed CWE-79

TI-2018-13649 CVE-2018-19227 · GHSA-f222-hhw2-f3g7

An issue was discovered in LAOBANCMS 2.0.

LOW 25

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00556 Published 2018-11-12 No fix listed CWE-79

TI-2020-13332 CVE-2020-18167 · GHSA-76fp-gvvh-3jpj

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary…

LOW 24

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu".

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00865 Published 2021-05-14 No fix listed CWE-79

TI-2020-13330 CVE-2020-18165 · GHSA-g8v8-2f42-88xv

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary…

LOW 24

Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu".

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00914 Published 2021-05-12 No fix listed CWE-79

TI-2018-13645 CVE-2018-19223 · GHSA-cf92-fqr6-278x

An issue was discovered in LAOBANCMS 2.0.

LOW 23

An issue was discovered in LAOBANCMS 2.0.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2018-11-12 No fix listed CWE-79

Open these records in search →

Critical	5
High	3
Medium	6
Low	0
No CVSS	0