Description


A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Related CPE's


Vulnerable

Weaknesses



CWE-693

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-02T02:15:39.867Z

2 weeks ago

Last modified

2026-01-07T21:57:09.493Z

2 weeks ago