NVD

Id
10801  
Name
CVE-2011-4337  
Description
Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-01-29  
Modified Date
2012-02-02  
Seq
2011-4337  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60687 10801 CVE-2011-4337 http://bugs.sitracker.org/view.php?id=1737  View
60688 10801 CVE-2011-4337 18132  View
60689 10801 CVE-2011-4337 [oss-security] 20111121 Re: Fwd: Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability  View
60690 10801 CVE-2011-4337 20111119 Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33417 JVNDB-2011-003657 Support Incident Tracker における任意の PHP コードを実行可能な言語ファイルに挿入される脆弱性 Support Incident Tracker の translate.php には、任意の PHP コードを i18n ディレクトリにある実行可能な言語ファイルに挿入される脆弱性が存在します。 CVE-2011-4337 52244 CVE-2011-4337 10801 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003657.html 2011-11-13 2012-02-01 View