CVE-2018-19220

An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to execute arbitrary PHP code via the host parameter to the install/ URI.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-11-12

Last modified

2024-09-16

Weaknesses

CWE-94

Affected products

• Laobancms (Laobancms)

References

• https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#getshell