CVE-2018-6910: High severity DedeCMS Dedecms vulnerability
Published Feb 13, 2018
·Updated
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php.
Affected Software
1 affected component
DedeCMS Dedecms=5.7
Event History
Feb 13, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-6910?
CVE-2018-6910 is classified as a medium severity vulnerability due to its potential for information disclosure.
2
How does CVE-2018-6910 affect DedeCMS 5.7?
CVE-2018-6910 allows remote attackers to discover the full path of the installation through specific file requests.
3
What are the steps to mitigate CVE-2018-6910?
To mitigate CVE-2018-6910, restrict access to sensitive files and implement proper security measures such as disabling directory listing.
4
Is CVE-2018-6910 easily exploitable?
Yes, CVE-2018-6910 can be easily exploited by attackers with knowledge of the file structure.
5
Which versions of DedeCMS are affected by CVE-2018-6910?
DedeCMS version 5.7 is specifically affected by CVE-2018-6910.