CVE-2018-6910

DedeCMS 5.7 is affected by CVE-2018-6910, a path-disclosure vulnerability that allows remote attackers to discover the full server path by requesting include/downmix.inc.php or inc/inc_archives_functions.php. The issue enables information disclosure that can aid further attacks. The Nuclei templa...