CVE-2018-6880
MEDIUMEmpireCMS 6.6-7.2 - Path Disclosure via class/connect.php Parameter
Title source: llmDescription
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
References (2)
Core 2
Core References
Broken Link, Third Party Advisory x_refsource_misc
https://github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.md
Exploit, Third Party Advisory x_refsource_misc
https://kongxin.gitbook.io/empirecms/
Scores
CVSS v3
5.3
EPSS
0.0183
EPSS Percentile
76.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-668
Status
published
Products (1)
phome/empirecms
6.6 - 7.2
Published
Feb 12, 2018
Tracked Since
Feb 18, 2026