PT-2018-14875 · Laoban · Laobancms

Publicado 2018-11-12 · Atualizado 2019-10-03 · CVE-2018-19222

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0

Description An issue in LAOBANCMS allows an attack via the "install/mysql hy.php" endpoint with specific parameters, riqi and i, set to 0, enabling the reset of the admin password even when the install.txt file exists.

Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider restricting access to the "install/mysql hy.php" endpoint until a patch is available. Avoid using the parameters riqi and i in this endpoint with a value of 0 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-19222

Produtos afetados

Laobancms

Referências · 3

• 🔥❌ https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#reset-admin-password · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-19222 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-19222 · Aviso do Fabricante