CVE-2019-25256 | VideoFlow Digital Video Protection DVP 1.40.0.15/2.10/2.10.0.5 downloadsys.pl ID path traversal (Exploit 44386 / EDB-44386)

Uncategorized

A vulnerability, which was classified as critical, was found in VideoFlow Digital Video Protection DVP 1.40.0.15/2.10/2.10.0.5. This vulnerability affects unknown code of the file downloadsys.pl. Such manipulation of the argument ID leads to path traversal.

This vulnerability is documented as CVE-2019-25256. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More