LaobanCMS 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:laobancms:laobancms:2.0:*:*:*:*:*:*:*part: a version: 2.0 update: *
| Vendor | Laobancms (2d26a210-b30a-51e0-b0e5-a50d96cde276) |
|---|---|
| Product | Laobancms (3b3006d3-67b3-507f-b4f1-0ef3c55fe9b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-18167 |
vulnerable | 2026-06-08 05:20:56.880054 |
Details available
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu".
Published: 2021-05-14T13:14:28.000Z
Updated: 2024-08-04T14:00:48.977Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18166 |
vulnerable | 2026-06-08 05:20:56.879630 |
Details available
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc".
Published: 2021-05-14T13:09:44.000Z
Updated: 2024-08-04T14:00:48.929Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18165 |
vulnerable | 2026-06-08 05:20:56.878947 |
Details available
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Website SEO Keywords" field on the page "admin/info.php?shuyu".
Published: 2021-05-12T17:34:25.000Z
Updated: 2024-08-04T14:00:49.074Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19328 |
vulnerable | 2026-06-08 05:11:15.630504 |
Details available
LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal.
Published: 2018-11-17T15:00:00.000Z
Updated: 2024-08-05T11:30:04.203Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19229 |
vulnerable | 2026-06-08 05:11:15.488256 |
Details available
An issue was discovered in LAOBANCMS 2.0. It allows XSS via the admin/art.php?typeid=1 biaoti parameter.
Published: 2018-11-12T20:00:00.000Z
Updated: 2024-09-16T23:51:39.953Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19228 |
vulnerable | 2026-06-08 05:11:15.487980 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19227 |
vulnerable | 2026-06-08 05:11:15.487714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19226 |
vulnerable | 2026-06-08 05:11:15.487444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19225 |
vulnerable | 2026-06-08 05:11:15.487069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19224 |
vulnerable | 2026-06-08 05:11:15.486795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19223 |
vulnerable | 2026-06-08 05:11:15.486397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19222 |
vulnerable | 2026-06-08 05:11:15.486031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19221 |
vulnerable | 2026-06-08 05:11:15.485629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19220 |
vulnerable | 2026-06-08 05:11:15.485243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.