CVE-2025-34126

Deeper analysis

A path traversal vulnerability exists in RIPS Scanner version 0.54. The flaw, tracked as CWE-22, resides in the windows/code.php script and permits remote attackers to supply a manipulated file parameter in HTTP GET requests, enabling arbitrary file reads on the underlying system using the web server's privileges and resulting in sensitive information disclosure. The issue carries a CVSS 4.0 score of 8.7 reflecting network attack vector, low complexity, and no required authentication or user interaction.

Unauthenticated remote attackers can exploit the vulnerability by crafting requests to the affected script, achieving read access to any file accessible by the web server process. This can expose configuration files, source code, or other sensitive data stored on the host.

Public references include a 2015 technical write-up, a Metasploit auxiliary scanner module, an Exploit-DB entry, and a VulnCheck advisory, indicating the issue has been known and weaponized for years. The associated EPSS score stands at 0.8467 with an identical recorded peak, showing sustained but not recently increasing exploitation probability.