CVE-2021-30049

SysAid Technologies 20.3.64 b14 is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the KeepAlive.jsp?stamp= URI. The issue allows an attacker to inject and execute malicious scripts in the victim’s browser, with potential consequences including session hijacking, defacement, or...

Sysaid Technologies SysAid SQL注入漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, an Israeli company. A SQL injection vulnerability exists in SysAid version 20.3.64 b14, which can be exploited by remote attackers to obtain sensitive information...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...

SysAid Technologies SysAid Cross-Site Scripting Vulnerability

SysAid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid Technologies SysAid version 20.1.11b26. The vulnerability stems from a lack of proper validation of client-side data by the web...

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

Design/Logic Flaw

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

CVE-2020-13168

CVE-2020-13168 affects SysAid 20.1.11b26 and enables a reflected XSS via the ForgotPassword.jsp?accountid parameter. The CNVD entry notes that the vulnerability can allow execution of client-side code; other sources corroborate the reflected XSS characterization. No remediation details are provid...

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

SysAid Technologies SysAid On-Premise Code Issue Vulnerability

SysAid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies, Israel SysAid On-Premise is a locally installed version of SysAid. A security vulnerability exists in the AJP protocol port in SysAid Technologies SysAid On-Premise version 20.1.11. An attacker coul...

CVE-2020-10569

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...

CVE-2020-10569

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...

Design/Logic Flaw

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...

CVE-2020-10569

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...

CVE-2020-10569

SysAid On-Premise 20.1.11 is reported to expose the AJP port by default, enabling a GhostCat-related file-read/remote-command exposure and unauthenticated file uploads that can be chained to execute commands. The description explicitly links these issues to AJP access and file upload weaknesses, ...

CVE-2020-10569

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...

Sysaid 20.1.11 b26 Remote Command Execution Vulneravility

Sysaid version 20.1.11 b26 suffers from an AJP13 remote command execution vulnerability. Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution Google Dork: intext:"Help Desk Software by SysAid " Exploit Author: Ahmed Sherif Vendor Homepage: https://www.sysaid.com/free-help-desk-software...

CVE-2020-10569

SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate o...

PT-2020-12210 · Sysaid · Sysaid On-Premise

Name of the Vulnerable Software and Affected Versions: SysAid On-Premise version 20.1.11 Description: The issue allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. This is possible because, by default, the AJP...

Sysaid 20.1.11 b26 Remote Command Execution

Exploit Title: Sysaid 20.1.11 b26 - Remote Command Execution Google Dork: intext:"Help Desk Software by SysAid " Date: 2020-03-09 Exploit Author: Ahmed Sherif Vendor Homepage: https://www.sysaid.com/free-help-desk-software Software Link: https://www.sysaid.com/free-help-desk-software Version:...