CVE-2011-5075: Sitracker Support Incident Tracker

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.

Affected products

• Sitracker Support Incident Tracker: version 3.6 only; version 3.45 only; version 3.50 only; version 3.51 only; version 3.60 only; version 3.61 only; …

Published 2012-01-29. Last modified 2026-06-16.