CVE-2011-3833 in Support Incident Trackerinfo

Summary

Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

09/26/2011

Disclosure

01/28/2012

CPE

ready

Exploit

Download

CVSS

6.3

EPSS

0.19148

Activities

Very Low

Sources