Vulnerability in Sitracker Support Incident Tracker
CVE-2011-5075
translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.
EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.
Affected products
- Sitracker Support_incident_tracker — versions 3.6, 3.45, 3.50
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)