An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies.

Published Nov 12, 2018 · Updated Sep 16, 2024 · Assigned by mitre