CVE-2011-3829

This Metasploit module exploits CVE-2011-3833 in Support Incident Tracker (SiT) <= 3.65 by combining two vulnerabilities: arbitrary file upload and directory path disclosure. It authenticates, retrieves the upload directory, uploads a malicious PHP file, and executes it to achieve remote code execution.

This Metasploit module exploits CVE-2011-3829 and CVE-2011-3833 in Support Incident Tracker (SiT!) to achieve remote command execution by uploading a malicious PHP file. It combines two vulnerabilities: directory path disclosure and unrestricted file upload.