2018-11-12 05:00:00
mitre
PUBLISHED
An issue was discovered in XiaoCms 20141229. /admin/index.php?c=database allows full path disclosure in a "failed to open stream" error message.