Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2018-25365

PCViewer vt1000 Directory Traversal via GET Request

Description

PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests. Attackers can use path traversal sequences ../../../../../../../../../../../../etc/passwd to access sensitive system files outside the intended directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PCViewer PCViewer

  • vt1000affected

References