Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-5067
support incident tracker
sit!
cve-2011-5067
file upload vulnerability
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.2%
move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
Affected configurations
Node
sitrackersupport_incident_trackerMatch3.65
| CPE | Name | Operator | Version |
|---|---|---|---|
| sitracker:support_incident_tracker | sitracker support incident tracker | eq | 3.65 |
References
Related
prion
prion
Information disclosure
2012-01-29 04:04:00
nvd
nvd
CVE-2011-5067
2012-01-29 04:04:44
cvelist
cvelist
CVE-2011-5067
2022-10-03 16:15:11
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.2%
Related for CVE-2011-5067