Vulnerability Details CVE-2011-3832
Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v2 Score 6.5
References
- http://secunia.com/advisories/45453
- http://secunia.com/secunia_research/2011-78/
- http://www.osvdb.org/77002
- http://www.securityfocus.com/bid/50632
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71236
- http://secunia.com/advisories/45453
- http://secunia.com/secunia_research/2011-78/
- http://www.osvdb.org/77002
- http://www.securityfocus.com/bid/50632
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71236
Products affected by CVE-2011-3832
-
cpe:2.3:a:sitracker:support_incident_tracker:3.65