Description
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
Unscored
CVE-2018-6880
EUVD-2018-18625GHSA-qpwj-fcq8-gvwh
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.
Published Feb 12, 2018 · Updated Aug 5, 2024 · Assigned by mitre