CVE-2011-5075 translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installatio...
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitracker support incident tracker | = 3.6 | No fix listed |
| sitracker support incident tracker | = 3.45 | No fix listed |
| sitracker support incident tracker | = 3.45-beta1 | No fix listed |
| sitracker support incident tracker | = 3.50 | No fix listed |
| sitracker support incident tracker | = 3.50-beta1 | No fix listed |
| sitracker support incident tracker | = 3.51 | No fix listed |
| sitracker support incident tracker | = 3.60 | No fix listed |
| sitracker support incident tracker | = 3.61 | No fix listed |
| sitracker support incident tracker | = 3.62 | No fix listed |
| sitracker support incident tracker | = 3.63 | No fix listed |
| sitracker support incident tracker | = 3.63-beta1 | No fix listed |
| sitracker support incident tracker | = 3.64 | No fix listed |
| sitracker support incident tracker | = 3.65 | No fix listed |
References
- bugs.sitracker.org exploit
- 18132 exploit
- [oss-security] 20111121 Re: Fwd: Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability exploit mailing-list
- 20111119 Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability exploit mailing-list