exploitDog

CVE-2021-30486

Опубликовано: 22 июл. 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1).

Ссылки

https://eh337.net/2021/04/10/sysaid-ii/
Exploit
Third Party Advisory
https://eh337.net/2021/04/10/sysaid-ii/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sysaid:sysaid:20.3.64:b14:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00257

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-w8w8-8hcx-qjrq

github

больше 3 лет назад

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1).

EPSS

Процентиль: 49%

0.00257

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89