CVE-2025-34126

UNKNOWN 0.0

RIPS Scanner v0.54 Path Traversal

CVSS Score

0.0

EPSS Score

73.6%

EPSS Percentile

99th

A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.

CWE	CWE-22
Vendor	rips technologies
Product	rips scanner
Published	Jul 16, 2025
Last Updated	Apr 7, 2026

Stay Ahead of the Next One

Get instant alerts for rips technologies rips scanner

Be the first to know when new unknown vulnerabilities affecting rips technologies rips scanner are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

RIPS Technologies / RIPS Scanner

0.54

References

NVD ↗ CVE.org ↗ EPSS Data ↗

codesec.blogspot.com: https://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html exploit-db.com: https://www.exploit-db.com/exploits/18660 raw.githubusercontent.com: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/rips_traversal.rb rips-scanner.sourceforge.net: https://rips-scanner.sourceforge.net/ vulncheck.com: https://www.vulncheck.com/advisories/rips-scanner-path-traversal

Credits

localh0t