CVE-2024-3218

A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondata[callee]/jsondata[imagename] leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259065 was assigned to this vulnerability.

• CWE-24

• https://github.com/garboa/cve_3/blob/main/file_put_content.md
• https://vuldb.com/?ctiid.259065
• https://vuldb.com/?id.259065
• https://vuldb.com/?submit.308510
• https://github.com/garboa/cve_3/blob/main/file_put_content.md
• https://vuldb.com/?ctiid.259065
• https://vuldb.com/?id.259065
• https://vuldb.com/?submit.308510

Published

Apr 3, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32161jizhiCMS 2.5 suffers from a File upload vulnerability.9.8
• CVE-2024-32162CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.4.3
• CVE-2024-32163CMSeasy 7.7.7.9 is vulnerable to code execution.6.4
• CVE-2024-32166Webid v1.2.1 suffers from an Insecure Direct Object Referenc…8.8
• CVE-2024-32167Sourcecodester Online Medicine Ordering System 1.0 is vulner…9.1
• CVE-2024-3217The WP Directory Kit plugin for WordPress is vulnerable to S…8.8
• CVE-2024-3219The “socket” module provides a pure-Python fallback to the …5.1
• CVE-2024-3220There is a defect in the CPython standard library module “mi…2.3
• CVE-2024-32205Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: non…
• CVE-2024-32206A stored cross-site scripting (XSS) vulnerability in the com…4.6
• CVE-2024-3221A vulnerability classified as critical was found in SourceCo…8.8
• CVE-2024-32210The LoMag WareHouse Management application version 1.0.20.12…5.3