SysAid 20.4.74 - Cross-Site Scripting

SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter. id: CVE-2021-31862 info: name: SysAid 20.4.74 - Cross-Site Scripting author: jas37 severity: medium description: SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via...

CVE-2021-31862

CVE-2021-31862 SysAid 20.4.74는 인증 없이 KeepAlive.jsp 파라미터를 통해 반사형 XSS를 허용합니다. 타임라인 발견: 2021년 4월 28일 최초 벤더 연락: 2021년 4월 28일 보고: 2021년 4월 28일 CVE ID 발급: 2021년 4월 28일 두 번째 벤더 연락: 벤더가 최초 연락에 응답하지 않음: 2021년 5월 28일 공개: 2021년 10월 29일 영향을 받는 버전: 20.4.74 및 이전 버전 크레딧: Citadel Cyber Security...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

Authentication flaw

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

CVE-2021-31862

SysAid 20.4.74 contains a reflected Cross-Site Scripting (XSS) vulnerability in the KeepAlive.jsp stamp parameter, exploitable without authentication. Affected: SysAid 20.4.74 and earlier. Root cause: unencoded stamp parameter reflected into the page output. Impact: potentially executing maliciou...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A security vulnerability exists in SysAid Technologies SysAid 20.4.74 that allows XSS via the KeepAlive.jsp tag parameter without any authentication...

Exploit for Cross-site Scripting in Sysaid

CVE-2021-31862 SysAid 20.4.74 allows reflected XSS via the Ke...

Cross site scripting

SysAid 20.3.64 b14 is affected by Cross Site Scripting XSS via a /KeepAlive.jsp?stamp= URI...

CVE-2021-30049

SysAid Technologies 20.3.64 b14 is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the KeepAlive.jsp?stamp= URI. The issue allows an attacker to inject and execute malicious scripts in the victim’s browser, with potential consequences including session hijacking, defacement, or...

CVE-2021-30049

SysAid 20.3.64 b14 is affected by Cross Site Scripting XSS via a /KeepAlive.jsp?stamp= URI...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...