Path Traversal in Rips Technologies Scanner
CVE-2025-34126
A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
EPSS exploit prediction
EPSS: 0.021 (81.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 81.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: +0.000
Affected products
- Rips Technologies Scanner — versions 0.54
Weakness classification (CWE)
Public proof-of-concept exploits
References
- codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html (exploit, third-party-advisory)
- www.exploit-db.com/exploits/18660 (exploit)
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/… (exploit)
- rips-scanner.sourceforge.net/ (product)
- www.vulncheck.com/advisories/rips-scanner-path-traversal (third-party-advisory)
Frequently asked questions
- What is CVE-2025-34126?
- CVE-2025-34126 is a vulnerability in Rips Technologies Scanner, classified under Path Traversal. Published 2025-07-16.
- Is CVE-2025-34126 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.