An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter.
- https://github.com/AvaterXXX/laobanCMS/blob/master/1.md#sql-injection
No PoCs found on GitHub currently.