CVE-2018-6910

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php

published February 13, 2018

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18838 · 97.3th percentile
Published
2018-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php
    cvelistv5