Read the docs
TI-2007-05416 Aliases CVE-2007-5635GHSA-gvc5-x64j-cff4

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!)…

Priority MEDIUM 46Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3.30 have unknown impact and attack vectors.

Why it matters now

EPSS 0.01446 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 44

CPEVersionsRoleVendor
cpe:2.3:a:sitracker:support_incident_tracker:*:*:*:*:*:*:*:*up to 3.24VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:1.8.00:*:*:*:*:*:*:*1.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:2.8.00:*:*:*:*:*:*:*2.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.00:*:*:*:*:*:*:*3.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta1:*:*:*:*:*:*3.00 beta1VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta2:*:*:*:*:*:*3.00 beta2VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta3:*:*:*:*:*:*3.00 beta3VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.01:*:*:*:*:*:*:*3.01VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.02:*:*:*:*:*:*:*3.02VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.03:*:*:*:*:*:*:*3.03VulnerableSitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:*:*:*:*:*:*:*:* Versions up to 3.24 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:1.8.00:*:*:*:*:*:*:* Versions 1.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:2.8.00:*:*:*:*:*:*:* Versions 2.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.00:*:*:*:*:*:*:* Versions 3.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta1:*:*:*:*:*:* Versions 3.00 beta1 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta2:*:*:*:*:*:* Versions 3.00 beta2 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.00:beta3:*:*:*:*:*:* Versions 3.00 beta3 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.03:*:*:*:*:*:*:* Versions 3.03 Vulnerable ·Sitracker
Show 34 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:sitracker:support_incident_tracker:3.03a:*:*:*:*:*:*:*3.03aVulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.04a:*:*:*:*:*:*:*3.04aVulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.05:*:*:*:*:*:*:*3.05VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.06:*:*:*:*:*:*:*3.06VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.07:*:*:*:*:*:*:*3.07VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.07.1:*:*:*:*:*:*:*3.07.1VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.07.2:*:*:*:*:*:*:*3.07.2VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.07.3:*:*:*:*:*:*:*3.07.3VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.08:*:*:*:*:*:*:*3.08VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.08.1:alpha:*:*:*:*:*:*3.08.1 alphaVulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.09:*:*:*:*:*:*:*3.09VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.10:*:*:*:*:*:*:*3.10VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.11:*:*:*:*:*:*:*3.11VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.12:*:*:*:*:*:*:*3.12VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.14:*:*:*:*:*:*:*3.14VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.15:*:*:*:*:*:*:*3.15VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.16:*:*:*:*:*:*:*3.16VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.17:*:*:*:*:*:*:*3.17VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.18:*:*:*:*:*:*:*3.18VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.19:*:*:*:*:*:*:*3.19VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.20:*:*:*:*:*:*:*3.20VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.21:*:*:*:*:*:*:*3.21VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.22:*:*:*:*:*:*:*3.22VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.22pl1:*:*:*:*:*:*:*3.22pl1VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.23:*:*:*:*:*:*:*3.23VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.24:beta-2:*:*:*:*:*:*3.24 beta-2VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:3.24:beta2:*:*:*:*:*:*3.24 beta2VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:10.8.00:*:*:*:*:*:*:*10.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:11.8.00:*:*:*:*:*:*:*11.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:14.8.00:*:*:*:*:*:*:*14.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:16.8.00:*:*:*:*:*:*:*16.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:17.8.00:*:*:*:*:*:*:*17.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:18.8.00:*:*:*:*:*:*:*18.8.00VulnerableSitracker
cpe:2.3:a:sitracker:support_incident_tracker:21.8.00:*:*:*:*:*:*:*21.8.00VulnerableSitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.03a:*:*:*:*:*:*:* Versions 3.03a Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.04a:*:*:*:*:*:*:* Versions 3.04a Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.05:*:*:*:*:*:*:* Versions 3.05 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.06:*:*:*:*:*:*:* Versions 3.06 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.07:*:*:*:*:*:*:* Versions 3.07 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.07.1:*:*:*:*:*:*:* Versions 3.07.1 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.07.2:*:*:*:*:*:*:* Versions 3.07.2 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.07.3:*:*:*:*:*:*:* Versions 3.07.3 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.08:*:*:*:*:*:*:* Versions 3.08 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.08.1:alpha:*:*:*:*:*:* Versions 3.08.1 alpha Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.09:*:*:*:*:*:*:* Versions 3.09 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.14:*:*:*:*:*:*:* Versions 3.14 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.15:*:*:*:*:*:*:* Versions 3.15 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.16:*:*:*:*:*:*:* Versions 3.16 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.17:*:*:*:*:*:*:* Versions 3.17 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.18:*:*:*:*:*:*:* Versions 3.18 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.19:*:*:*:*:*:*:* Versions 3.19 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.20:*:*:*:*:*:*:* Versions 3.20 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.21:*:*:*:*:*:*:* Versions 3.21 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.22:*:*:*:*:*:*:* Versions 3.22 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.22pl1:*:*:*:*:*:*:* Versions 3.22pl1 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.23:*:*:*:*:*:*:* Versions 3.23 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.24:beta-2:*:*:*:*:*:* Versions 3.24 beta-2 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:3.24:beta2:*:*:*:*:*:* Versions 3.24 beta2 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:10.8.00:*:*:*:*:*:*:* Versions 10.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:11.8.00:*:*:*:*:*:*:* Versions 11.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:14.8.00:*:*:*:*:*:*:* Versions 14.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:16.8.00:*:*:*:*:*:*:* Versions 16.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:17.8.00:*:*:*:*:*:*:* Versions 17.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:18.8.00:*:*:*:*:*:*:* Versions 18.8.00 Vulnerable ·Sitracker
  • cpe:2.3:a:sitracker:support_incident_tracker:21.8.00:*:*:*:*:*:*:* Versions 21.8.00 Vulnerable ·Sitracker

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-5635
  2. 2026-10-03 Alias added: GHSA-gvc5-x64j-cff4

References

Patch 1

  • TI-2011-03390 Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker… CVSS 2.0MEDIUM 6.0
  • TI-2011-03802 Static code injection vulnerability in translate.php in Support Incident Tracker (aka… CVSS 2.0HIGH 7.5
  • TI-2011-03388 SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka… CVSS 2.0HIGH 7.5
  • TI-2011-03386 ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote… CVSS 2.0MEDIUM 4.0
  • TI-2011-04349 Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65… CVSS 2.0HIGH 7.5
  • TI-2011-04348 Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64… CVSS 2.0HIGH 7.5
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences