CVE-2011-5074: Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3....

Security readout for executives and security teams

This issue affects Support Incident Tracker (SiT!) before 3.65. If an administrator is logged in and visits attacker-controlled content, the attacker may force administrative changes, including changing an admin email, adding a new administrator, or inserting script content. Exposure is likely limited to organizations still running Support Incident Tracker, also known as SiT!, earlier than version 3.65. Internet-accessible admin sessions increase practical risk. Prioritize remediation if SiT! is still in use, especially on externally reachable systems. The issue can enable unauthorized administrator-level changes, but the source bundle provides no evidence of active exploitation. Mitigation focus: Upgrade SiT! to version 3.65 or later where applicable.; Review SiT! 3.65 release notes and vendor guidance.; Restrict access to administrative SiT! interfaces..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.