SysAid 20.4.74 - Cross-Site Scripting

SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter. id: CVE-2021-31862 info: name: SysAid 20.4.74 - Cross-Site Scripting author: jas37 severity: medium description: SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via...

CVE-2021-31862

CVE-2021-31862 SysAid 20.4.74 allows reflected XSS via the KeepAlive.jsp parameter, without authentication. Timeline Discovered: April 28, 2021 Initial Vendor Contact: April 28, 2021 Reported: April 28, 2021 CVE ID issued: April 28, 2021 Secondary Vendor Contact: Vendor did not reply to initial...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

Authentication flaw

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

CVE-2021-31862

SysAid 20.4.74 contains a reflected Cross-Site Scripting (XSS) vulnerability in the KeepAlive.jsp stamp parameter, exploitable without authentication. Affected: SysAid 20.4.74 and earlier. Root cause: unencoded stamp parameter reflected into the page output. Impact: potentially executing maliciou...

PT-2021-19555

Name of the Vulnerable Software and Affected Versions: SysAid version 20.4.74 Description: The issue allows for cross-site scripting XSS attacks via the stamp parameter in the "KeepAlive.jsp" page without requiring any authentication. This means an attacker can inject malicious scripts into the...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A security vulnerability exists in SysAid Technologies SysAid 20.4.74 that allows XSS via the KeepAlive.jsp tag parameter without any authentication...

CVE-2021-31862: Improper Neutralization of Input During Web Page Generation

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

Exploit for Cross-site Scripting in Sysaid

CVE-2021-31862 SysAid 20.4.74 allows reflected XSS via the Ke...

Cross site scripting

SysAid 20.3.64 b14 is affected by Cross Site Scripting XSS via a /KeepAlive.jsp?stamp= URI...

CVE-2021-30049

SysAid 20.3.64 b14 is affected by Cross Site Scripting XSS via a /KeepAlive.jsp?stamp= URI...

CVE-2021-30049

SysAid Technologies 20.3.64 b14 is affected by a Cross‑Site Scripting (XSS) vulnerability exposed via the KeepAlive.jsp?stamp= URI. The issue allows an attacker to inject and execute malicious scripts in the victim’s browser, with potential consequences including session hijacking, defacement, or...

CVE-2021-30049: Improper Neutralization of Input During Web Page Generation

SysAid 20.3.64 b14 is affected by Cross Site Scripting XSS via a /KeepAlive.jsp?stamp= URI...

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...

PT-2021-18586

Name of the Vulnerable Software and Affected Versions SysAid version 20.3.64 b14 Description The issue is related to Cross Site Scripting XSS and can be exploited via the "/KeepAlive.jsp?stamp=" URI. This is a type of attack where an attacker can inject malicious scripts into a website, potential...