CVE-2011-3829: ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain...

Security readout for executives and security teams

This is an information disclosure issue in Support Incident Tracker (SiT!) 3.65. An authenticated remote user can trigger an error that exposes the server installation path. By itself, this is not code execution, but it can help an attacker map the environment for later attacks. Exposure is most likely limited to organizations still running SiT! 3.65 with authenticated access to the affected upload endpoint. The bundle does not establish impact for later versions, forks, or differently configured deployments. Low immediate urgency unless SiT! 3.65 is internet-facing or broadly accessible to untrusted users. Prioritize confirmation during legacy application review and remediate as part of reducing reconnaissance value. Mitigation focus: Check SiT! vendor or project guidance for a fixed release or workaround.; Upgrade or retire SiT! 3.65 if still deployed.; Restrict access to authenticated upload functionality to trusted users only..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.