PT-2025-53342 · Unknown · Downloadsys.Pl+1

Published 2025-12-24 · Updated 2025-12-24 · CVE-2019-25256

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions VideoFlow Digital Video Protection DVP version 2.10

Description The software contains a directory traversal issue that allows attackers to access arbitrary system files. This is possible due to unvalidated ID parameters. Attackers can exploit Perl scripts, such as downloadsys.pl, to read sensitive files by manipulating directory path traversal in download requests.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the downloadsys.pl script.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-25256

Affected Products

Videoflow Digital Video Protection Dvp

Downloadsys.Pl

References · 5

• 🔥 http://video-flow.com · Exploit
• 🔥 https://exploit-db.com/exploits/44386 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2018-5454.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25256 · Security Note
• https://t.me/CVEtracker/40633 · Telegram Post