An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter.

Published Nov 12, 2018 · Updated Sep 16, 2024 · Assigned by mitre