PT-2012-1737
CVE-2011-3829
·
تاريخ النشر
2012-01-29
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Support Incident Tracker (aka SiT!) version 3.65
Description
The issue allows remote authenticated users to obtain sensitive information via the file name in the ftp upload file.php script, which reveals the installation path in an error message.
Recommendations
For version 3.65, consider restricting access to the ftp upload file.php script until a fix is available, or modify the script to prevent the disclosure of sensitive information in error messages.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾