PT-2018-14875 · Laoban · Laobancms

Published 2018-11-12 · Updated 2019-10-03 · CVE-2018-19222

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0

Description An issue in LAOBANCMS allows an attack via the "install/mysql hy.php" endpoint with specific parameters, riqi and i, set to 0, enabling the reset of the admin password even when the install.txt file exists.

Recommendations For LAOBANCMS version 2.0, as a temporary workaround, consider restricting access to the "install/mysql hy.php" endpoint until a patch is available. Avoid using the parameters riqi and i in this endpoint with a value of 0 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-19222

Affected Products

Laobancms

References · 3

• 🔥❌ https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#reset-admin-password · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2018-19222 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19222 · Vendor Advisory