CVE-2025-34126
RIPS Scanner v0.54 Path Traversal
- State
- Published
- Severity
- 8.7 High
- Published
- Jul 16, 2025
- Updated
- Jul 14, 2026
- Reserved
- Apr 15, 2025
Description
A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
RIPS ScannerRIPS Technologies |
|
References
- https://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.htmlthird-party-advisoryexploit
- https://www.exploit-db.com/exploits/18660exploit
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/rips_traversal.rbexploit
- https://rips-scanner.sourceforge.net/product
- https://www.vulncheck.com/advisories/rips-scanner-path-traversalthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.