2021-03-15 06:54:11 +00:00
id : CVE-2018-6910
info :
2021-03-15 07:34:20 +00:00
name : DedeCMS 5.7 path disclosure
2021-03-15 06:54:11 +00:00
author : pikpikcu
severity : medium
2021-03-15 06:59:55 +00:00
reference : https://nvd.nist.gov/vuln/detail/CVE-2018-6910
2021-03-15 07:32:01 +00:00
description : DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php
2021-03-15 07:35:45 +00:00
tags : cve,cve2018,dedecms
2021-03-15 06:54:11 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/include/downmix.inc.php"
matchers-condition : and
matchers :
- type : word
words :
- "downmix.inc.php"
- "Call to undefined function helper()"
part : body
condition : and
- type : status
status :
- 200
