Vulnerability Description
A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
Related Weaknesses (CWE)
References
- https://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/aux
- https://rips-scanner.sourceforge.net/
- https://www.exploit-db.com/exploits/18660
- https://www.vulncheck.com/advisories/rips-scanner-path-traversal
FAQ
What is CVE-2025-34126?
CVE-2025-34126 is a documented vulnerability. A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending cra...
How severe is CVE-2025-34126?
CVSS scoring is not yet available for CVE-2025-34126. Check NVD for updates.
Is there a patch for CVE-2025-34126?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.