CVE-2018-25178

HIGH

rul10 easyndexer 1.0 - Unauthenticated Arbitrary File Download via showtif.php File Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-25178. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary The exploit demonstrates an arbitrary file download vulnerability in Easyndexer 1.0 via the 'showtif.php' script, allowing an attacker to retrieve sensitive files (e.g., C:/Windows/win.ini) by manipulating the 'file' parameter. The PoC includes a crafted HTTP POST request and server response confirming the vulnerability.

Description

Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like configuration and initialization files.

Exploits (1)

exploitdb WORKING POC
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/45835

The exploit demonstrates an arbitrary file download vulnerability in Easyndexer 1.0 via the 'showtif.php' script, allowing an attacker to retrieve sensitive files (e.g., C:/Windows/win.ini) by manipulating the 'file' parameter. The PoC includes a crafted HTTP POST request and server response confirming the vulnerability.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Easyndexer 1.0
No auth needed
Prerequisites: network access to the target application
devstral-2 · analyzed Mar 06, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/45835

Scores

CVSS v3 7.5
EPSS 0.0058
EPSS Percentile 43.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
rul10/easyndexer 1.0
Published Mar 06, 2026
Tracked Since Mar 06, 2026