CVEvulnerability

CVE-2011-5075

5.0 MEDIUM Published 2012-01-29 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-01-29
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.

Affected configurations

• sitracker support incident tracker 3.6 • sitracker support incident tracker 3.45 • sitracker support incident tracker 3.50 • sitracker support incident tracker 3.51 • sitracker support incident tracker 3.60 • sitracker support incident tracker 3.61 • sitracker support incident tracker 3.62 • sitracker support incident tracker 3.63 • sitracker support incident tracker 3.64 • sitracker support incident tracker 3.65

References

http://bugs.sitracker.org/view.php?id=1737 Exploit
http://www.exploit-db.com/exploits/18132/ Exploit
http://www.openwall.com/lists/oss-security/2011/11/22/3 Exploit
http://www.securityfocus.com/archive/1/520577 Exploit
http://bugs.sitracker.org/view.php?id=1737 Exploit
http://www.exploit-db.com/exploits/18132/ Exploit
http://www.openwall.com/lists/oss-security/2011/11/22/3 Exploit
http://www.securityfocus.com/archive/1/520577 Exploit