Exploitation Summary
EIP tracks 2 public exploits for CVE-2018-25113.
PoCs published by Carlos Avila, Carlos Avila, h00die, including Metasploit module auxiliary/scanner/http/dicoogle_traversal.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Dicoogle PACS 2.5.0 via the 'UID' parameter in a GET request, allowing an attacker to read arbitrary files accessible to the web user.
Description
An unauthenticated path traversal vulnerability exists in Dicoogle PACS Web Server version 2.5.0 and possibly earlier. The vulnerability allows remote attackers to read arbitrary files on the underlying system by sending a crafted request to the /exportFile endpoint using the UID parameter. Successful exploitation can reveal sensitive files accessible by the web server user.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in Dicoogle PACS 2.5.0 via the 'UID' parameter in a GET request, allowing an attacker to read arbitrary files accessible to the web user.
This Metasploit module exploits an unauthenticated directory traversal vulnerability in Dicoogle PACS Web Server v2.5.0, allowing arbitrary file reads via a crafted GET request to the '/exportFile' endpoint with a traversal payload in the 'UID' parameter.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N