NVD

Id
10405  
Name
CVE-2011-3833  
Description
Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-01-28  
Modified Date
2012-02-02  
Seq
2011-3833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59189 10405 CVE-2011-3833 http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt  View
59190 10405 CVE-2011-3833 18108  View
59191 10405 CVE-2011-3833 VU#576355  View
59192 10405 CVE-2011-3833 50632  View
59193 10405 CVE-2011-3833 50896  View
59194 10405 CVE-2011-3833 sit-ftpuploadfile-file-upload(71237)  View
59195 10405 CVE-2011-3833 sit-multiple-file-upload(71651)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25542 JVNDB-2012-001249 Support Incident Tracker の ftp_upload_file.php における任意の PHP コードを実行される脆弱性 Support Incident Tracker の ftp_upload_file.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2011-3833 51740 CVE-2011-3833 10405 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001249.html 2012-01-29 2012-02-01 View