PT-2021-18756

Name of the Vulnerable Software and Affected Versions SysAid version 20.3.64 b14 Description The issue is related to Blind and Stacker SQL injection. It can be exploited via several API endpoints, including "AssetManagementChart.jsp" with computerID or group1 parameters, "AssetManagementList.jsp"...

CVE-2021-30486: Improper Neutralization of Special Elements used in an SQL Command

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp GET computerID, AssetManagementChart.jsp POST group1, AssetManagementList.jsp GET computerID or group1, or AssetManagementSummary.jsp GET group1...