CVE-2018-6910 — AI Deep Analysis Summary

Q: What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: DedeCMS 5.7 suffers from an **Information Disclosure** vulnerability. 📉 **Consequences**: Attackers can retrieve the **full server file path** via direct requests to specific PHP files.

Q: Who is affected? (Versions/Components)

🎯 **Affected**: **Desdev DedeCMS** (Zhimeng CMS). 📦 **Version**: Specifically **Version 5.7**. 🌐 **Component**: The PHP CMS engine itself.

Q: What can hackers do? (Privileges/Data)

🕵️ **Hackers Can**: Send direct HTTP requests to trigger errors. 💾 **Data Leaked**: **Full absolute file paths** on the server. 🚫 **Note**: Data is limited to paths, not direct RCE or DB dump in this specific vector.

Q: Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: **LOW**. 🚫 **Auth Required**: **None**. 🌍 **Remote**: Yes, any remote attacker can exploit this without login credentials.

Q: Is there a public Exp? (PoC/Wild Exploitation)

💥 **Public Exp?**: **YES**. 📜 **PoC**: Available via **Nuclei templates** (projectdiscovery) and GitHub repositories (kongxin520). 🔄 **Wild Exploitation**: High potential due to simplicity.

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for direct requests to: 1. `/include/downmix.inc.php` 2. `/inc/inc_archives_functions.php`. 👀 **Indicator**: Look for **file path strings** in the HTTP response body.

Q: Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: Data does **not** list a specific official patch version. 📅 **Published**: 2018-02-13. ⚠️ **Status**: Likely requires manual code modification or upgrading to a patched fork if available.

Q: Is it urgent? (Priority Suggestion)

⚡ **Urgency**: **MEDIUM-HIGH**. 📉 **Risk**: While it only leaks paths, this aids **further attacks** (like LFI or RCE). 🏃 **Action**: Patch immediately if running DedeCMS 5.7.

Updated May 08, 2026

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: DedeCMS 5.7 suffers from an **Information Disclosure** vulnerability. 📉 **Consequences**: Attackers can retrieve the **full server file path** via direct requests to specific PHP files.

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: The flaw lies in **improper error handling** or path exposure in `include/downmix.inc.php` and `inc/inc_archives_functions.php`.…

Read full answer (login)

Q3Who is affected? (Versions/Components)

🎯 **Affected**: **Desdev DedeCMS** (Zhimeng CMS). 📦 **Version**: Specifically **Version 5.7**. 🌐 **Component**: The PHP CMS engine itself.

Q4What can hackers do? (Privileges/Data)

🕵️ **Hackers Can**: Send direct HTTP requests to trigger errors. 💾 **Data Leaked**: **Full absolute file paths** on the server. 🚫 **Note**: Data is limited to paths, not direct RCE or DB dump in this specific vector.

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: **LOW**. 🚫 **Auth Required**: **None**. 🌍 **Remote**: Yes, any remote attacker can exploit this without login credentials.

Q6Is there a public Exp? (PoC/Wild Exploitation)

💥 **Public Exp?**: **YES**. 📜 **PoC**: Available via **Nuclei templates** (projectdiscovery) and GitHub repositories (kongxin520). 🔄 **Wild Exploitation**: High potential due to simplicity.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for direct requests to: 1. `/include/downmix.inc.php` 2. `/inc/inc_archives_functions.php`. 👀 **Indicator**: Look for **file path strings** in the HTTP response body.

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: Data does **not** list a specific official patch version. 📅 **Published**: 2018-02-13. ⚠️ **Status**: Likely requires manual code modification or upgrading to a patched fork if available.

Q9What if no patch? (Workaround)

🛡️ **Workaround**: **Block access** to `downmix.inc.php` and `inc_archives_functions.php` via WAF or Web Server config (Nginx/Apache).…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

⚡ **Urgency**: **MEDIUM-HIGH**. 📉 **Risk**: While it only leaks paths, this aids **further attacks** (like LFI or RCE). 🏃 **Action**: Patch immediately if running DedeCMS 5.7.

Continue exploring

Vulnerability detail Full AI analysis (login) n/a