CVE-2018-19226

An issue was discovered in LAOBANCMS 2.0. It allows remote attackers to list .txt files via a direct request for the /data/0/admin.txt URI.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-11-12

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Laobancms (Laobancms)

References

• https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#info_exp