Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-117q-e4g6-27a6
Vulnerability ID VCID-117q-e4g6-27a6
Aliases CVE-2011-4337
Summary Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
epss 0.03201 https://api.first.org/data/v1/epss?cve=CVE-2011-4337
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2011-4337
CVE-2011-5075;OSVDB-79170;OSVDB-77215;CVE-2011-4337 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/18132.php
Data source Exploit-DB
Date added Nov. 19, 2011
Description Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution
Ransomware campaign use Unknown
Source publication date Nov. 19, 2011
Exploit type webapps
Platform php
Source update date Nov. 25, 2011
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86951
EPSS Score 0.03201
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T17:39:27.124658+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.0.0