Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-34126.
PoCs published by localh0t, including Metasploit module auxiliary/scanner/http/rips_traversal.
AI-analyzed exploit summary This exploit demonstrates local file inclusion vulnerabilities in RIPS <= 0.53, allowing an attacker to read arbitrary files via path traversal in the 'file' parameter of code.php and function.php.
Description
A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
Exploits (2)
This exploit demonstrates local file inclusion vulnerabilities in RIPS <= 0.53, allowing an attacker to read arbitrary files via path traversal in the 'file' parameter of code.php and function.php.
This Metasploit module exploits a directory traversal vulnerability in RIPS Scanner v0.54, allowing arbitrary file reads via a crafted GET request to 'code.php' with a manipulated 'file' parameter. The exploit validates the response and extracts the file content for storage.
References (5)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N