Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload an arbitrary file via the file parameter in the HTTP POST body. A successful request returns the absolute, server-side filesystem path of the uploaded file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sysaid Technologies SysAid 代码问题漏洞
Vulnerability Description
Sysaid Technologies SysAid是以色列SysAid Technologies（Sysaid Technologies）公司的一套IT服务管理解决方案。 Sysaid Technologies SysAid ITIL存在代码问题漏洞，该漏洞源于SysAid ITIL 20.4.74 b10中的UploadPsIcon.jsp存在一个不受限制的文件上传漏洞，该漏洞允许远程认证的攻击者可利用该漏洞通过HTTP POST主体中的file参数上传任意文件。成功的请求将返回所上传文件的服务器端文
CVSS Information
N/A
Vulnerability Type
N/A