Vulnerability in N/a

CVE-2018-6910

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.

EPSS: 0.925 (99.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

github.com/kongxin520/DedeCMS/blob/master/DedeCMS_5.7_Bug.md (x_refsource_MISC)
kongxin.gitbook.io/dedecms-5-7-bug/ (x_refsource_MISC)

Frequently asked questions

What is CVE-2018-6910?: CVE-2018-6910 is a vulnerability in N/a. Published 2018-02-13.
Is CVE-2018-6910 known to be exploited?: 14 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.