Directory Traversal Vulnerability in PCViewer vt1000 by Softpedia
CVE-2018-25365

8.7HIGH

Key Information:

Vendor

Softpedia

Status
Pcviewer
Vendor
CVE Published:
25 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25365?

PCViewer vt1000 is susceptible to a directory traversal vulnerability that exposes sensitive system files to unauthenticated attackers. By manipulating GET requests with relative path sequences, an attacker can traverse the file system and access files such as /etc/passwd, which may contain critical information about user accounts and system configurations. This vulnerability requires no authentication, making it particularly risky for systems running this product.

Affected Version(s)

PCViewer vt1000

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25365 - Proof of Concept

References

https://www.exploit-db.com/exploits/45248
exploit
http://www.softpedia.com/get/System/File-Management/Pc-Vi...
product
https://www.vulncheck.com/advisories/pcviewer-vt1000-dire...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berk Dusunur
.