Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxj3-5cjf-39gh

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondata[callee]/jsondata[imagename] leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259065 was assigned to this vulnerability.

A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondata[callee]/jsondata[imagename] leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259065 was assigned to this vulnerability.

EPSS

Процентиль: 22%
0.0007
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-24

Связанные уязвимости

CVSS3: 5.4
nvd
почти 2 года назад

A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondata[callee]/jsondata[imagename] leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259065 was assigned to this vulnerability.

EPSS

Процентиль: 22%
0.0007
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-24