CVE-2011-3833 Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then....
MediumCVSS 6.0
EPSS 19.0%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitracker support incident tracker | = 3.65 | No fix listed |
References
- packetstormsecurity.org exploit
- 45453 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 18108 exploit
- VU#576355 third-party-advisory us-government-resource
- 77003 vdb-entry
- 50632 exploit vdb-entry
- 50896 exploit vdb-entry
- sit-ftpuploadfile-file-upload(71237) vdb-entry
- sit-multiple-file-upload(71651) vdb-entry