CVE-2018-6881

CVE-2018-6881 affects EmpireCMS 6.6. The vulnerability allows remote attackers to discover the full filesystem path via an array value passed to admin/tool/ShowPic.php, indicating a path leakage weakness in ShowPic.php. Root cause: improper handling of a request parameter leading to information d...