CVE

Id
51745  
CVE No.
CVE-2011-3833  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20110926)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
555829 51745 CVE-2011-3833 EXPLOIT-DB:18108  View
555830 51745 CVE-2011-3833 URL:http://www.exploit-db.com/exploits/18108  View
555831 51745 CVE-2011-3833 MISC:http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt  View
555832 51745 CVE-2011-3833 MISC:http://secunia.com/secunia_research/2011-79/  View
555833 51745 CVE-2011-3833 CERT-VN:VU#576355  View
555834 51745 CVE-2011-3833 URL:http://www.kb.cert.org/vuls/id/576355  View
555835 51745 CVE-2011-3833 BID:50632  View
555836 51745 CVE-2011-3833 URL:http://www.securityfocus.com/bid/50632  View
555837 51745 CVE-2011-3833 BID:50896  View
555838 51745 CVE-2011-3833 URL:http://www.securityfocus.com/bid/50896  View
555839 51745 CVE-2011-3833 OSVDB:77003  View
555840 51745 CVE-2011-3833 URL:http://www.osvdb.org/77003  View
555841 51745 CVE-2011-3833 SECUNIA:45453  View
555842 51745 CVE-2011-3833 URL:http://secunia.com/advisories/45453  View
555843 51745 CVE-2011-3833 XF:sit-ftpuploadfile-file-upload(71237)  View
555844 51745 CVE-2011-3833 URL:http://xforce.iss.net/xforce/xfdb/71237  View
555845 51745 CVE-2011-3833 XF:sit-multiple-file-upload(71651)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33288 JVNDB-2011-003528 Wuzly における SQL インジェクションの脆弱性 Wuzly には、SQL インジェクションの脆弱性が存在します。 CVE-2011-3838 51745 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003528.html  View