laobancms vulnerabilities and fixes

Recent CVEs affecting laobancms, with upgrade or downgrade steps. 14 tracked.

laobancms has 14 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-05-14. Highest priority: CVE-2018-19328 (score 69/100).

• CVE-2020-18167 MEDIUM 4.8 DOWNGRADE Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting co
• CVE-2020-18166 CRITICAL 9.8 DOWNGRADE Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a fi
• CVE-2020-18165 MEDIUM 4.8 DOWNGRADE Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting co
• CVE-2018-19328 CRITICAL 9.8 DOWNGRADE LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.
• CVE-2018-19229 MEDIUM 5.4 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19228 HIGH 7.5 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19227 MEDIUM 5.4 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19226 MEDIUM 5.3 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19225 HIGH 8.8 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19224 HIGH 7.5 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19223 MEDIUM 4.8 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19222 CRITICAL 9.8 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19221 CRITICAL 9.8 DOWNGRADE An issue was discovered in LAOBANCMS 2.0
• CVE-2018-19220 CRITICAL 9.8 DOWNGRADE An issue was discovered in LAOBANCMS 2.0

FAQ

How do I fix laobancms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is laobancms being exploited right now?

None of the tracked laobancms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which laobancms CVE should I patch first?

CVE-2018-19328 currently ranks highest (69/100): LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal..

RSS feed for laobancms · ← Back to latest CVEs