CVEs-PoC/2018/CVE-2018-6881.md

CVE-2018-6881

Description

EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPic.php.

POC

Reference

• https://kongxin.gitbook.io/dedecms-5-7-bug/
• https://kongxin.gitbook.io/empirecms/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection