CVE ID:	CVE-2011-3831
Description:	SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3831 BugTraq ID: 50632 http://www.securityfocus.com/bid/50632 CERT/CC vulnerability note: VU#576355 http://www.kb.cert.org/vuls/id/576355 http://secunia.com/secunia_research/2011-77/ http://www.osvdb.org/77001 http://secunia.com/advisories/45453 XForce ISS Database: sit-incidentattachments-sql-injection(71235) https://exchange.xforce.ibmcloud.com/vulnerabilities/71235