CVE-2018-25374
HIGHSoftneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25374. PoCs published by Carlos Avila.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in Softneta MedDream PACS Server Premium 6.7.1.1 via the 'path' parameter in 'nocache.php'. The PoC includes URLs with encoded traversal sequences to access sensitive files like 'win.ini' and 'hosts'.
Description
Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Attackers can send requests to nocache.php with encoded backslash sequences to traverse directories and access sensitive files including system configuration and password files.
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in Softneta MedDream PACS Server Premium 6.7.1.1 via the 'path' parameter in 'nocache.php'. The PoC includes URLs with encoded traversal sequences to access sensitive files like 'win.ini' and 'hosts'.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N