Information disclosure

2012-01-2904:04:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%

JSON

move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.

CPENameOperatorVersion
support_incident_trackereq3.65

CPE	Name	Operator	Version
	support_incident_tracker	eq	3.65

References

www.kb.cert.org/vuls/id/576355