CVE-2018-7479

https://notcve.org/view.php?id=CVE-2018-7479

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php. YzmCMS 3.6 permite que atacantes remotos descubran la ruta completa mediante una petición directa a application/install/templates/s1.php. • https://github.com/kongxin520/YzmCMS/blob/master/YzmCMS_3.6_bug.md https://kongxin.gitbook.io/yzmcms-3-6-bug • CWE-668: Exposure of Resource to Wrong Sphere •