CVE-2011-5068 Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via u...
MediumCVSS 6.8
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via user_delete.php and other unspecified programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitracker support incident tracker | = 3.65 | No fix listed |
References
- 77657 vdb-entry
- 45437 third-party-advisory vendor-advisory
- VU#576355 third-party-advisory us-government-resource
- 50896 vdb-entry
- sit-multiple-csrf(71653) vdb-entry