PT-2012-2053 · Sit! · Support Incident Tracker

Published 2012-01-29 · Updated 2012-02-02 · CVE-2011-5075

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Support Incident Tracker (aka SiT!) versions 3.45 through 3.65

Description The issue allows remote attackers to obtain sensitive information via a direct request to the translate.php file using the save action, which reveals the installation path.

Recommendations For versions 3.45 through 3.65, consider restricting access to the translate.php file to minimize the risk of exploitation. As a temporary workaround, avoid using the save action in the translate.php file until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2011-5075

Affected Products

Support Incident Tracker

References · 7

• 🔥 http://openwall.com/lists/oss-security/2011/11/22/3 · Exploit
• 🔥 http://bugs.sitracker.org/view.php?id=1737 · Exploit
• 🔥 http://securityfocus.com/archive/1/520577 · Exploit
• 🔥 https://exploit-db.com/exploits/18132 · Exploit
• 🔥 http://exploit-db.com/exploits/18132 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5075 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5075 · Note