high7.5
CVE-2018-6910
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.
Impact
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dedecms | Dedecms | Version 5.7 |