CVE-2011-4337
Summary
| CVE | CVE-2011-4337 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-01-29 11:55:00 UTC |
| Updated | 2012-02-02 05:00:00 UTC |
| Description | Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable. |
Risk And Classification
Problem Types: CWE-94
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sitracker | Support Incident Tracker | 3.45 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.45 | beta1 | All | All |
| Application | Sitracker | Support Incident Tracker | 3.50 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.50 | beta1 | All | All |
| Application | Sitracker | Support Incident Tracker | 3.51 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.6 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.60 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.61 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.62 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.63 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.63 | beta1 | All | All |
| Application | Sitracker | Support Incident Tracker | 3.64 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.65 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.45 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.45 | beta1 | All | All |
| Application | Sitracker | Support Incident Tracker | 3.50 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.50 | beta1 | All | All |
| Application | Sitracker | Support Incident Tracker | 3.51 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.6 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.60 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.61 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.62 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.63 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.63 | beta1 | All | All |
| Application | Sitracker | Support Incident Tracker | 3.64 | All | All | All |
| Application | Sitracker | Support Incident Tracker | 3.65 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution | EXPLOIT-DB | www.exploit-db.com | Exploit |
| 0001737: PHP Code Injection Vulnerability - SiT! Bugs | CONFIRM | bugs.sitracker.org | Exploit |
| oss-security - Re: Fwd: Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability | MLIST | www.openwall.com | Exploit |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | Exploit |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.