CVE-2011-5068: Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allo...

Security readout for executives and security teams

Support Incident Tracker (SiT!) 3.65 had CSRF flaws that could let an attacker trick a logged-in user into sending unwanted requests, including deleting a user. Business risk depends on whether this old web application is still deployed and who can access administrative functions. Exposure is most likely in organizations still running legacy Support Incident Tracker (SiT!) 3.65. Risk is higher where authenticated administrative users access the application through a browser and the application is reachable from untrusted networks. Treat this as an exposure-discovery issue unless SiT! 3.65 is confirmed in use. If present, prioritize remediation because account deletion can disrupt support operations and legacy software may lack maintained security fixes. Mitigation focus: Inventory and identify any deployed Support Incident Tracker or SiT! 3.65 instances.; Check vendor and archived advisory guidance for fixed versions or official remediation.; Retire or replace unsupported SiT! deployments where no maintained fix exists..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.