CVE-2011-3832 in Support Incident Tracker

Riassunto

di MITRE

Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 26/09/2011
• Divulgazione: 28/01/2012
• Moderazione: accettato
• Voce: VDB-60036
• CPE: pronto
• CWE: CWE-94 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.3 (VulDB)
• EPSS: 0.01377
• KEV: no
• Attività: molto basso
• Settore: Police, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3832
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3832
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3832/