VYPR
Unrated severityNVD Advisory· Published Jan 29, 2012· Updated Jun 16, 2026

CVE-2011-5069

CVE-2011-5069

Description

Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in unspecified directory, a different program than CVE-2011-3833.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sitracker:support_incident_tracker:3.65:*:*:*:*:*:*:*
    • (no CPE)range: <= 3.65

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.