6 matches found
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
CVE-2021-31862
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
PT-2021-19555
Name of the Vulnerable Software and Affected Versions: SysAid version 20.4.74 Description: The issue allows for cross-site scripting XSS attacks via the stamp parameter in the "KeepAlive.jsp" page without requiring any authentication. This means an attacker can inject malicious scripts into the...
CVE-2021-31862: Improper Neutralization of Input During Web Page Generation
SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...
Sysaid Technologies SysAid 跨站脚本漏洞
Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...