Description
Ilevia EVE X1 Server 存在文件读取漏洞，攻击者可以通过向 /ajax/php/get_file_content.php 接口发送特制的请求，读取服务器上的任意文件内容。此漏洞可能导致敏感信息泄露，例如系统配置文件、用户凭据等。
Ilevia EVE X1 Server /ajax/php/get_file_content.php 文件读取漏洞（CVE-2025-34518）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-34518
https://access.redhat.com/security/cve/cve-2025-34518
https://github.com/advisories/GHSA-vgch-v2fr-f5q3
https://www.cvedetails.com/cve/CVE-2025-34518/
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-relative-path-traversal
https://www.zeroscience.mk/advisories/ZSL-2025-5960.html
https://beyondmachines.net/event_details/cisa-and-ilevia-report-multiple-critical-vulnerabilities-in-eve-x1-industrial-servers-q-9-p-i-h