← All advisories

Medium severity5.3NVD Advisory· Published Feb 12, 2018· Updated Jun 17, 2026

CVE-2018-6881

CVE-2018-6881

Description

EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Kongxin520/Empirecmsreferences
Dedecms/Dedecms
cpe:2.3:a:dedecms:dedecms:5.7:-:*:*:*:*:*:*
Phome/Empirecms3 versions
cpe:2.3:a:phome:empirecms:6.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phome:empirecms:6.6:*:*:*:*:*:*:*
- cpe:2.3:a:phome:empirecms:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:phome:empirecms:7.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

kongxin.gitbook.io/dedecms-5-7-bug/nvdExploitThird Party Advisory
kongxin.gitbook.io/empirecms/nvdExploitThird Party Advisory
github.com/kongxin520/EmpireCMS/blob/master/EmpireCMS.mdnvdBroken LinkThird Party Advisory

News mentions

0

No linked articles in our index yet.