CVE-2011-4337
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.6%
from disclosure to weapon0 days
Published on NVDJan 29
1st PoCNov 19
exploitation probability
2.6%top 16% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/18132unverifiedcve_referencewww.exploit-db.com/exploits/18132/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.