EmpireCMS admin/tool/ShowPic.php file path leakage vulnerability

EmpireCMS is a free CMS Content Management System. A security vulnerability exists in EmpireCMS version 6.6. The vulnerability can be exploited by remote attackers to obtain the full path with the help of admin/tool/ShowPic.php file...