Vulnerabilities

TI-2008-02091 CVE-2008-2179 · GHSA-mcrq-98wm-gqcx

Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote attackers to inject arbitrary web script or HTML via the searchField parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2008-05-13 No fix listed CWE-79

TI-2007-05064 CVE-2007-5259 · GHSA-6mgm-2wjr-c3v5

Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows…

LOW 21

Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows remote attackers to perform some actions as administrators, as demonstrated by changing the administrator password.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00524 Published 2007-10-06 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote…

Cross-site request forgery (CSRF) vulnerability in Ilient SysAid 4.5.03 and 4.5.04 allows…