CVE-2018-6910: Dedecms

High severity, CVSS 7.5. EPSS: 18.8% chance of exploitation in the next 30 days.

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.

Affected products

• Dedecms Dedecms: version 5.7 only

Published 2018-02-13. Last modified 2026-06-17.