Lucene search
HistoryJan 29, 2012 - 4:04 a.m.
CVE-2011-3832
cve-2011-3832
sit!
eval injection
remote code execution
php
vulnerability
7.6 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.9%
Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sitracker:support_incident_tracker | sitracker support incident tracker | eq | 3.65 |
Related
prion
prion
Design/Logic Flaw
2012-01-29 04:04:00
cvelist
cvelist
CVE-2011-3832
2012-01-29 02:00:00
openvas
openvas
Support Incident Tracker (SiT!) <= 3.65 Multiple Vulnerabilities
2011-11-16 00:00:00
Support Incident Tracker (SiT!) Multiple Input Validation Vulnerabilities
2011-11-16 00:00:00
7.6 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
77.9%
Related for CVE-2011-3832