CVE-2015-2998

Mô tả

Tham khảo

• packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Jun/8 · Exploit
• securityfocus.com/archive/1/535679/100/0/threaded
• securityfocus.com/bid/75035
• sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk · Vendor Advisory

Lỗ hổng khác của sysaid

• CVE-2025-2777NGHIÊM TRỌNG 9.8SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing funct…
• CVE-2025-2776NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing…
• CVE-2025-2775CAO 7.5ĐANG BỊ KHAI THÁC (CISA KEV)SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing fu…
• CVE-2024-36394NGHIÊM TRỌNG 9.8SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CVE-2024-36393NGHIÊM TRỌNG 9.8SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')