Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to copy arbitrary files on the server filesystem to the web root (with an arbitrary filename) via the tempFile and fileName parameters in the HTTP POST body.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sysaid Technologies SysAid 安全漏洞
Vulnerability Description
Sysaid Technologies SysAid是以色列SysAid Technologies（Sysaid Technologies）公司的一套IT服务管理解决方案。 Sysaid Technologies SysAid ITIL存在安全漏洞，该漏洞源于SysAid ITIL 20.4.74 b10中的userselfservicesetts .jsp存在一个不受限制的文件复制漏洞，允许远程认证的攻击者可利用该漏洞通过HTTP POST主体中的tempFile和filename参数将服务器文件系统中
CVSS Information
N/A
Vulnerability Type
N/A