CVE-2025-2775

CVE-2025-2775 affects SysAid On-Prem versions

The vulnerability of SysAid’s software for supporting and controlling hardware and software systems lies in the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.

The vulnerability of the software used for supporting and controlling hardware and software systems of SysAid is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

PT-2024-5430 · Sysaid · Sysaid

Name of the Vulnerable Software and Affected Versions: SysAid affected versions not specified Description: The issue is related to the improper neutralization of special elements used in an OS command, which can allow a remote attacker to execute arbitrary commands. This is a critical issue that...

The vulnerability of the software for automation of support and control of hardware and software systems from SysAid allows a perpetrator to execute arbitrary code.

The vulnerability of the doPost method in the UserEntry class of the com.ilient.server package in the SysAid software for hardware and software support and control involves the possibility of path traversal. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading...

Sysaid Technologies SysAid 安全漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies SysAid versions prior to 23.2.14 b18, which originates from the possibility that an authenticated user may be able to steal files from...

Sysaid Technologies Sysaid 代码问题漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. A security vulnerability exists in Sysaid Technologies Sysaid versions prior to 23.2.14 b18, which stems from a malicious user with administrative privileges may be able to upload dangerous...

PT-2023-23669 · Sysaid · Sysaid

Name of the Vulnerable Software and Affected Versions: Sysaid affected versions not specified Description: A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method. Recommendations: At the moment, there is no information about a newer...

Sysaid Technologies Sysaid 授权问题漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from the Israeli company Sysaid Technologies. Sysaid Technologies Sysaid has a security vulnerability that stems from a problematic authentication of the application. An attacker can bypass the authentication process by...

PT-2022-15687 · Sysaid · Sysaid

Name of the Vulnerable Software and Affected Versions: Sysaid – Pro Plus Edition versions v20.4.74 b10 through v22.1.30 b49 Description: The issue allows an attacker to bypass access controls by logging in as a guest and manipulating the URL path to access the system dashboard. The attacker can...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

Sysaid 20.1.11 b26 - Remote Command Execution

Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution Google Dork: intext:"Help Desk Software by SysAid " Date: 2020-03-09 Exploit Author: Ahmed Sherif Vendor Homepage: https://www.sysaid.com/free-help-desk-software Software Link: https://www.sysaid.com/free-help-desk-software Version:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote attackers to perform some actions as administrators, as demonstrated by changing the administrator password. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...