CVE-2018-6910: Exposure of Resource to Wrong Sphere

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php...