RainbowFish PacsOne 6.6.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rainbowfishsoftware:pacsone_server:6.6.2:*:*:*:*:*:*:*

part: a version: 6.6.2 update: *

VendorRainbowfishsoftware (0ccbb04f-22a6-5787-82b2-576ca4bdcabf)
ProductPacsone Server (0b8da9ca-7e8e-5767-b7c5-98992cd45a53)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25124 vulnerable 2026-06-08 05:11:29.428114 PacsOne Server 6.6.2 DICOM Web Viewer Directory Traversal LFI
PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path' parameter. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.
Published: 2025-11-10T22:32:03.086Z
Updated: 2026-04-07T14:03:47.357Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.