CVE-2011-3833

This Metasploit module exploits CVE-2011-3833 in Support Incident Tracker (SiT) <= 3.65 by combining two vulnerabilities: arbitrary file upload and directory path disclosure. It authenticates, retrieves the upload directory, uploads a malicious PHP file, and executes it to achieve remote code execution.

This Metasploit module exploits CVE-2011-3833 in Support Incident Tracker (SiT) by combining two vulnerabilities: arbitrary file upload and directory path disclosure. It authenticates, retrieves the upload directory, uploads a malicious PHP file, and executes it to achieve remote command execution.