DedeCMS 5.7 path disclosure

By Jijith Rajan Jijith Rajan
Published on 10 Jan 2022
Vulnerability

Description

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request to include/downmix.inc.php or inc/inc_archives_functions.php

Recommendations

  • Update DedeCMS to the latest version
Jijith Rajan
Written by
Jijith Rajan
Cyber Security Engineer

His passion for staying abreast of the latest security threats and trends, coupled with his hands-on experience, allows him to actively contribute to the protection of digital assets. Jijith's dedication and enthusiasm make him a promising talent in the ever-evolving realm of cybersecurity, promising a safer digital future.

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo