Beveiligingsadvies

CVE-2018-25311

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-29 19:25:45

Laatst bijgewerkt 2026-07-28 01:46:42

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd.

← Alle CVE's bekijken Bekijk op cve.org ↗