CVE-2014-9436

概要

参考情報

• packetstormsecurity.com/files/129705/SysAid-Server-Arbitrary-File-Disclosure.html · Exploit
• seclists.org/fulldisclosure/2014/Dec/99 · Exploit
• exploit-db.com/exploits/35593 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/99456

sysaid のその他の脆弱性

• CVE-2025-2777緊急 9.8SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing funct…
• CVE-2025-2776緊急 9.8悪用確認済み（CISA KEV）SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing…
• CVE-2025-2775高 7.5悪用確認済み（CISA KEV）SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing fu…
• CVE-2024-36394緊急 9.8SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CVE-2024-36393緊急 9.8SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')