CVE-2018-25374— Softneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal
Possible ATT&CK Techniques 1AI
T1083 · File and Directory DiscoveryAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Softneta | MedDream PACS Server Premium | 6.7.1.1 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-25374
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Softneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal
Source: NVD (National Vulnerability Database)
Vulnerability Description
Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Attackers can send requests to nocache.php with encoded backslash sequences to traverse directories and access sensitive files including system configuration and password files.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Softneta | MedDream PACS Server Premium | 6.7.1.1 | - |
II. Public POCs for CVE-2018-25374
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-25374
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-25374 (1)
Exploits & Public PoCs for CVE-2018-25374 (1)
IV. Related Vulnerabilities
Same weakness: CWE-22
- CVE-2026-44788
SharpCompress: Directory traversal via directory entries in - CVE-2026-42448
wormhole receive, with --output pointing at an existing dire - CVE-2026-40383
Joomla! Core - [20260509] - LFI in HTMLView layout parameter - CVE-2026-40384
Joomla! Core - [20260510] - Path traversal in com_media webs - CVE-2026-48126
Algernon: Host header path traversal in --domain mode reads
V. Comments for CVE-2018-25374
No comments yet