Path traversal

2012-01-2911:55:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.

CPENameOperatorVersion
support_incident_trackereq3.45 beta1
support_incident_trackereq3.62
support_incident_trackereq3.51
support_incident_trackereq3.61
support_incident_trackereq3.50 beta1
support_incident_trackereq3.50
support_incident_trackereq3.6
support_incident_trackereq3.63 beta1
support_incident_trackereq3.65
support_incident_trackereq3.64

Name	Operator	Version
support_incident_tracker	eq	3.45 beta1
support_incident_tracker	eq	3.62
support_incident_tracker	eq	3.51
support_incident_tracker	eq	3.61
support_incident_tracker	eq	3.50 beta1
support_incident_tracker	eq	3.50
support_incident_tracker	eq	3.6
support_incident_tracker	eq	3.63 beta1
support_incident_tracker	eq	3.65
support_incident_tracker	eq	3.64