CVE-2011-3829

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Support Incident Tracker 3.65 - Remote Command Execution (Metasploit)2011-11-13 · webapps · php · Verified

Impact

ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt
• http://secunia.com/advisories/45453
• http://secunia.com/secunia_research/2011-75/
• http://www.exploit-db.com/exploits/18108
• http://www.osvdb.org/76999
• http://www.securityfocus.com/bid/50632
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71233
• http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txt
• http://secunia.com/advisories/45453
• http://secunia.com/secunia_research/2011-75/
• http://www.exploit-db.com/exploits/18108
• http://www.osvdb.org/76999
• http://www.securityfocus.com/bid/50632
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71233