CVE-2024-1703

A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been classified as problematic. This affects the function openfile of the file /adminapi/system/file/openfile. The manipulation leads to absolute path traversal. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254391. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-36
• CWE-22

• https://github.com/Echosssy/-CRMEB-Mall-commercial-version-of-any-file-read-vulnerability/blob/main/README.mdExploit
• https://vuldb.com/?ctiid.254391Permissions Required
• https://vuldb.com/?id.254391Third Party Advisory
• https://github.com/Echosssy/-CRMEB-Mall-commercial-version-of-any-file-read-vulnerability/blob/main/README.mdExploit
• https://vuldb.com/?ctiid.254391Permissions Required
• https://vuldb.com/?id.254391Third Party Advisory

Published

Feb 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1696In Santesoft Sante FFT Imaging versions 1.4.1 and prior once…7.8
• CVE-2024-1697The Custom WooCommerce Checkout Fields Editor plugin for Wor…5.4
• CVE-2024-1698The NotificationX – Best FOMO, Social Proof, WooCommerce Sal…9.8
• CVE-2024-1700A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2024-1701A vulnerability has been found in keerti1924 PHP-MYSQL-User-…9.8
• CVE-2024-1702A vulnerability was found in keerti1924 PHP-MYSQL-User-Login…9.8
• CVE-2024-1704A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It h…8.1
• CVE-2024-1705A vulnerability was found in Shopwind up to 4.6. It has been…8.1
• CVE-2024-1706A vulnerability was determined in ZKTeco ZKBio Access IVS up…5.4
• CVE-2024-1707A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2024-1708ConnectWise ScreenConnect 23.9.7 and prior are affected by p…8.4
• CVE-2024-1709ConnectWise ScreenConnect 23.9.7 and prior are affected by a…10