What is CVE-2018-25178?

CVE-2018-25178 is a high-severity vulnerability in Rul10 Easyndexer, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-03-06.

How severe is CVE-2018-25178?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Rul10 Easyndexer

CVE-2018-25178

Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter. Attackers can send POST requests to showtif.php with arbitrary file paths in the file parameter to retrieve system files like configuration and initialization files.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Rul10 Easyndexer — versions 1.0
Sourceforge Easyndexer — versions 1.0

Weakness classification (CWE)

CWE-22 — Path Traversal

References

disclosure@vulncheck.com (Exploit, VDB Entry, Third Party Advisory, exploit)
disclosure@vulncheck.com (Broken Link, third-party-advisory)

Frequently asked questions

What is CVE-2018-25178?: CVE-2018-25178 is a high-severity vulnerability in Rul10 Easyndexer, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-03-06.
How severe is CVE-2018-25178?: High severity. CVSS v3 base score is 7.5 out of 10.