CVE-2011-3832

2012-01-2902:00:00

flexera

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.

References

secunia.com/advisories/45453

secunia.com/secunia_research/2011-78/

www.osvdb.org/77002

www.securityfocus.com/bid/50632

exchange.xforce.ibmcloud.com/vulnerabilities/71236