CVE-2011-3829
CVE-2011-3829
ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.
Productos afectados
n/a · n/aPoCs públicas encontradas — 3
cve_referencepacketstormsecurity.org/files/106933/sit_file_upload.rb.txtno verificadocve_referencewww.exploit-db.com/exploits/18108no verificadoexploitdbwww.exploit-db.com/exploits/18108no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://packetstormsecurity.org/files/106933/sit_file_upload.rb.txthttp://secunia.com/advisories/45453http://secunia.com/secunia_research/2011-75/https://exchange.xforce.ibmcloud.com/vulnerabilities/71233http://www.exploit-db.com/exploits/18108http://www.osvdb.org/76999http://www.securityfocus.com/bid/50632