Medium severity5.3NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026
CVE-2018-9922
CVE-2018-9922
Description
An issue was discovered in idreamsoft iCMS through 7.0.7. Physical path leakage exists via an invalid nickname field that reveals a core/library/weixin.class.php pathname.
Affected products
2<=7.0.7+ 1 more
- (no CPE)range: <=7.0.7
- (no CPE)range: <=7.0.7
Patches
Vulnerability mechanics
References
1- github.com/idreamsoft/iCMS/issues/16nvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.