# CVE-2018-25311

> Vulnerability · severity: **MEDIUM** (CVSS 6.5).

## Description

VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows authenticated attackers to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd.

## Key facts

- **CVE ID:** CVE-2018-25311
- **Published:** 2026-04-29
- **CVSS severity:** MEDIUM
- **CVSS base score:** 6.5
- **CWE codes:** CWE-22

## Primary sources

- NIST NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-25311

## Citation

> AI Analytics. CVE-2018-25311. Retrieved 2026-06-26 from https://api.ai-analytics.org/cve/CVE-2018-25311. Derived from NIST NVD. Licensed CC0.

---

*[Dataset catalog](https://api.ai-analytics.org/datasets/) · [AI Analytics](https://api.ai-analytics.org/) · CC0 1.0*