laobancms records
14 published records for vendor laobancms.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-565 Reliance on Cookies without Validation and Integrity Checking1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2018-19328No exploit | LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.laobancms · laobancms · CWE-22 | Critical9.8 | — | 1.7% | Nov 17, 2018 |
40Plan | CVE-2020-18166No exploit | Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extensionlaobancms · laobancms · CWE-434 | Critical9.8 | — | 1.6% | May 14, 2021 |
40Plan | CVE-2018-19220No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-94 | Critical9.8 | — | 1.6% | Nov 12, 2018 |
39Monitor | CVE-2018-19222No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-79 | Critical9.8 | — | 1.4% | Nov 12, 2018 |
39Monitor | CVE-2018-19221No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-89 | Critical9.8 | — | 1.2% | Nov 12, 2018 |
35Monitor | CVE-2018-19225No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-352 | High8.8 | — | 0.5% | Nov 12, 2018 |
30Monitor | CVE-2018-19228No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-22 | High7.5 | — | 1.5% | Nov 12, 2018 |
30Monitor | CVE-2018-19224No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-565 | High7.5 | — | 0.9% | Nov 12, 2018 |
21Monitor | CVE-2018-19226No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-200 | Medium5.3 | — | 1.1% | Nov 12, 2018 |
21Monitor | CVE-2018-19227No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-79 | Medium5.4 | — | 0.5% | Nov 12, 2018 |
21Monitor | CVE-2018-19229No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-79 | Medium5.4 | — | 0.5% | Nov 12, 2018 |
19Monitor | CVE-2020-18165No exploit | Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Klaobancms · laobancms · CWE-79 | Medium4.8 | — | 0.9% | May 12, 2021 |
19Monitor | CVE-2020-18167No exploit | Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Intrlaobancms · laobancms · CWE-79 | Medium4.8 | — | 0.8% | May 14, 2021 |
19Monitor | CVE-2018-19223No exploit | An issue was discovered in LAOBANCMS 2.0.laobancms · laobancms · CWE-79 | Medium4.8 | — | 0.5% | Nov 12, 2018 |
- CVE-2018-1932840Plan
LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.
CriticalCVSS 9.8No exploitEPSS 1%laobancms · laobancmsNov 17, 2018
- CVE-2020-1816640Plan
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension
CriticalCVSS 9.8No exploitEPSS 1%laobancms · laobancmsMay 14, 2021
- CVE-2018-1922040Plan
An issue was discovered in LAOBANCMS 2.0.
CriticalCVSS 9.8No exploitEPSS 1%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922239Monitor
An issue was discovered in LAOBANCMS 2.0.
CriticalCVSS 9.8No exploitEPSS 1%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922139Monitor
An issue was discovered in LAOBANCMS 2.0.
CriticalCVSS 9.8No exploitEPSS 1%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922535Monitor
An issue was discovered in LAOBANCMS 2.0.
HighCVSS 8.8No exploitEPSS 0%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922830Monitor
An issue was discovered in LAOBANCMS 2.0.
HighCVSS 7.5No exploitEPSS 1%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922430Monitor
An issue was discovered in LAOBANCMS 2.0.
HighCVSS 7.5No exploitEPSS 0%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922621Monitor
An issue was discovered in LAOBANCMS 2.0.
MediumCVSS 5.3No exploitEPSS 1%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922721Monitor
An issue was discovered in LAOBANCMS 2.0.
MediumCVSS 5.4No exploitEPSS 0%laobancms · laobancmsNov 12, 2018
- CVE-2018-1922921Monitor
An issue was discovered in LAOBANCMS 2.0.
MediumCVSS 5.4No exploitEPSS 0%laobancms · laobancmsNov 12, 2018
- CVE-2020-1816519Monitor
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO K
MediumCVSS 4.8No exploitEPSS 0%laobancms · laobancmsMay 12, 2021
- CVE-2020-1816719Monitor
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Intr
MediumCVSS 4.8No exploitEPSS 0%laobancms · laobancmsMay 14, 2021
- CVE-2018-1922319Monitor
An issue was discovered in LAOBANCMS 2.0.
MediumCVSS 4.8No exploitEPSS 0%laobancms · laobancmsNov 12, 2018