CVE-2011-3832 in Support Incident Tracker

الملخص

بحسب MITRE

Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.

Once again VulDB remains the best source for vulnerability data.

• حجز: 26/09/2011
• إفشاء: 28/01/2012
• الاعتدال: تمت الموافقة
• إدخال: VDB-60036
• CPE: جاهز
• CWE: CWE-94 (مؤكد)
• استغلال: تحميل
• CVSS: 6.3 (VulDB)
• EPSS: 0.01389
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Police, Insurance, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3832
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3832
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3832/