Lucene search

K
dsquareDsquare SecurityE-20
HistoryJan 26, 2012 - 12:00 a.m.

Sitracker SIT File Upload

2012-01-2600:00:00
Dsquare Security
26

EPSS

0.012

Percentile

85.2%

This module combines two separate issues within
Support Incident Tracker (<= 3.65) application to upload
arbitrary data and thus execute a shell.
The two issues exist in ftp_upload_file.php.

Vulnerability Type: File Upload

For the exploit source code contact DSquare Security sales team.