CVE-2011-3829
Support Incident Tracker 3.65 - Authenticated Sensitive Information Exposure via FTP Upload Filename
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-3829.
PoCs published by Metasploit, Secunia Research, juan vazquez, including Metasploit module exploits/multi/http/sit_file_upload.
AI-analyzed exploit summary This Metasploit module exploits CVE-2011-3833 in Support Incident Tracker (SiT) <= 3.65 by combining two vulnerabilities: arbitrary file upload and directory path disclosure. It authenticates, retrieves the upload directory, uploads a malicious PHP file, and executes it to achieve remote code execution.
Description
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
Exploits (2)
This Metasploit module exploits CVE-2011-3833 in Support Incident Tracker (SiT) <= 3.65 by combining two vulnerabilities: arbitrary file upload and directory path disclosure. It authenticates, retrieves the upload directory, uploads a malicious PHP file, and executes it to achieve remote code execution.
This Metasploit module exploits CVE-2011-3829 and CVE-2011-3833 in Support Incident Tracker (SiT!) to achieve remote command execution by uploading a malicious PHP file. It combines two vulnerabilities: directory path disclosure and unrestricted file upload.