CVE-2011-3831

2012-01-2902:00:00

flexera

www.cve.org

AI Score

8.3

Confidence

Low

EPSS

0.005

Percentile

76.8%

JSON

SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name.

References

secunia.com/advisories/45453

secunia.com/secunia_research/2011-77/

www.kb.cert.org/vuls/id/576355

www.osvdb.org/77001

www.securityfocus.com/bid/50632

exchange.xforce.ibmcloud.com/vulnerabilities/71235