CVE-2018-20405

CVE-2018-20405

BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error.

Source: CVE-2018-20405