CVE-2018-25311
MEDIUMVideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal 2.10 (X-Prototype-Version: 1.6.0.2)
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25311. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates an authenticated directory traversal vulnerability in VideoFlow Digital Video Protection DVP 10, allowing arbitrary file disclosure via the 'ID' parameter in multiple Perl scripts. The provided curl command successfully retrieves the contents of '/etc/passwd'.
Description
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd.
Exploits (1)
The exploit demonstrates an authenticated directory traversal vulnerability in VideoFlow Digital Video Protection DVP 10, allowing arbitrary file disclosure via the 'ID' parameter in multiple Perl scripts. The provided curl command successfully retrieves the contents of '/etc/passwd'.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N