Code injection

2018-02-1203:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php.

CPENameOperatorVersion
dedecmseq5.7
empirecmseq6.6
empirecmseq7.0
empirecmseq7.2

Name	Operator	Version
dedecms	eq	5.7
empirecms	eq	6.6
empirecms	eq	7.0
empirecms	eq	7.2

References

github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md

kongxin.gitbook.io/dedecms-5-7-bug/

kongxin.gitbook.io/empirecms/