« Volver al listado

CVE-2011-5075

Estado: ModificadaMedia (5)—

translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sitracker — Support Incident Tracker

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-5075",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-01-29T11:55:02.640",
  "references": [
    {
      "url": "http://bugs.sitracker.org/view.php?id=1737",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/18132/",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/11/22/3",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/520577",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugs.sitracker.org/view.php?id=1737",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/18132/",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2011/11/22/3",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/520577",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path."
    },
    {
      "lang": "es",
      "value": "translate.php en Support Incident Tracker (También conocido como SIT) v3.45 a v3.65 permite a atacantes remotos obtener información sensible a través de una solicitud directa usando la acción de guardar (save), lo cual revela la ruta de instalación."
    }
  ],
  "lastModified": "2026-06-16T23:35:53.990",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48854537-091C-4350-A42E-8E6AA19A4C55"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.45:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65028034-D504-49CF-A62B-827A7F86733E"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.45:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E4CD2D0-66BF-4E95-B3AE-7598902B2C72"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2163711F-8830-471A-A9AE-C4B90DB1BC4C"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.50:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF3D5C9C-05DE-44A1-AEC2-308E87D2E0CD"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7929BFDD-9FA8-422B-945D-6FEC46B89E69"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5567EF75-2161-4A74-AADE-109B3F0DFD26"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "228B6318-F28A-4CB7-A054-5CB1E1C75048"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.62:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68D7980E-CA09-4A29-9901-47FE92A892E0"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.63:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59E43ED2-A943-4D8C-AAD2-189647073814"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.63:beta1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2C5C37A-8952-47E9-A081-A0EBDC7E7AF6"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.64:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C04580AF-8B83-4F0C-BD04-DCCA1BAB8F1F"
            },
            {
              "criteria": "cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "691D701C-AEA0-400C-92E9-DAE772E1CBB1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}