CVE-2011-5067

move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
References
Link Resource
http://www.kb.cert.org/vuls/id/576355 US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:*

Information

Published : 2012-01-28 20:04

Updated : 2012-10-11 21:00


NVD link : CVE-2011-5067

Mitre link : CVE-2011-5067


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

sitracker

  • support_incident_tracker