CVE-2024-3218 | Shibang Communications IP Network Intercom Broadcasting System 1.0 busyscreenshotpush.php jsondata[callee]/jsondata[imagename] path traversal

A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondata[callee]/jsondata[imagename] leads to path traversal: ‘../filedir’.

This vulnerability is uniquely identified as CVE-2024-3218. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.