medium5.3
CVE-2018-6880
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
Impact
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phome | Empirecms | from 6.6 through 7.2 |