CVE-2021-43974

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

CVE-2021-43974

CVE-2021-43974 affects SysAid ITIL 20.4.74 b10. The /enduserreg endpoint allows anonymous users to register new accounts even when the server-side setting to disable anonymous registration is enabled, bypassing client-side controls and enabling account creation without authentication. Connected d...

CVE-2021-43973

This CVE concerns SysAid ITIL 20.4.74 b10, where UploadPsIcon.jsp is vulnerable to an unrestricted file upload. An authenticated remote attacker can upload an arbitrary file via the file parameter in an HTTP POST, with the server returning the uploaded file’s absolute path. The issue affects the ...

CVE-2021-43973

An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the absolute, server-side filesystem path of the uploaded file...

CVE-2021-43972

CVE-2021-43972 concerns SysAid ITIL 20.4.74 b10. The vulnerability is an unrestricted file copy in /UserSelfServiceSettings.jsp, exploitable by a remote authenticated attacker who can copy arbitrary server files to the web root via tempFile and fileName in the HTTP POST body. The root cause is in...

CVE-2021-43972

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename via the tempFile and fileName parameters in the HTTP POST body...

CVE-2021-43971

CVE-2021-43971 is a SQL injection vulnerability in SysAid ITIL, affect­ing SysAid ITIL 20.4.74 b10. The issue is exploitable via the filterText parameter in /mobile/SelectUsers.jsp, allowing a remote authenticated attacker to execute arbitrary SQL commands. The connected documents confirm the aff...

CVE-2021-43971

A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter...

CVE-2021-43972: Undefined Security Weakness

An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename via the tempFile and fileName parameters in the HTTP POST body...

PT-2022-11961

Name of the Vulnerable Software and Affected Versions SysAid ITIL version 20.4.74 b10 Description A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter in the "/mobile/SelectUsers.jsp" API endpoint. Recommendations For SysAid...

PT-2022-11963

Name of the Vulnerable Software and Affected Versions SysAid ITIL version 20.4.74 b10 Description The issue allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body to the "/UploadPsIcon.jsp" API endpoint. A successful request returns the...

CVE-2021-43974: Missing Authentication for Critical Function

An issue was discovered in SysAid ITIL 20.4.74 b10. The /enduserreg endpoint is used to register end users anonymously, but does not respect the server-side setting that determines if anonymous users are allowed to register new accounts. Configuring the server-side setting to disable anonymous us...

PT-2022-11962

Name of the Vulnerable Software and Affected Versions SysAid ITIL version 20.4.74 b10 Description The issue allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root with an arbitrary filename. This is achieved via the tempFile and fileName parameters...

PT-2022-11964

Name of the Vulnerable Software and Affected Versions SysAid ITIL version 20.4.74 b10 Description An issue was discovered where the /enduserreg endpoint does not respect the server-side setting for anonymous user registration. This allows an attacker to create new accounts without prior...

Sysaid Technologies SysAid SQL注入漏洞

Sysaid Technologies SysAid is an IT service management solution from Israel-based SysAid Technologies Sysaid Technologies.A SQL injection vulnerability exists in SysAid ITIL, which can be exploited by attackers to execute arbitrary SQL commands via the filterText parameter...

CVE-2021-43971: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter...

CVE-2021-43973: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the absolute, server-side filesystem path of the uploaded file...

ZOHO ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates incident management, problem management, asset management IT project management, procurement and contract management and oth...

ServiceTonic SQL Injection Vulnerability

ServiceTonic, an ITIL-compliant service desk and enterprise services software, has a SQL injection vulnerability in the login form in versions prior to ServiceTonic 9.0.35937. An attacker could exploit the vulnerability to steal information via a specially crafted, HQL-compatible, time-series SQL...

ServiceTonic Arbitrary File Upload Vulnerability

ServiceTonic is an ITIL-compliant service desk and enterprise service software. serviceTonic versions prior to 9.0.35937 have an arbitrary file upload vulnerability in the service import feature. An attacker could exploit the vulnerability to execute JSP code by uploading a zip file that extracts...