move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
References
| Link | Resource |
|---|---|
| http://www.kb.cert.org/vuls/id/576355 | US Government Resource |
Configurations
Information
Published : 2012-01-28 20:04
Updated : 2012-10-11 21:00
NVD link : CVE-2011-5067
Mitre link : CVE-2011-5067
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
sitracker
- support_incident_tracker


