Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SysAid — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in SysAid, with AI-generated Chinese analysis, references, and POCs.

Vendor: SysAid

CVE IDTitleCVSSSeverityPublished
CVE-2024-36394 SysAid - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CWE-78 9.1 Critical2024-06-06
CVE-2024-36393 SysAid - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CWE-89 9.9 Critical2024-06-06
CVE-2024-27775 SysAid - CWE-918: Server-Side Request Forgery (SSRF) CWE-918 7.2 High2024-03-28
CVE-2023-32226 Sysaid - CWE-552: Files or Directories Accessible to External Parties CWE-552 8.3 High2023-07-30
CVE-2023-32225 Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type CWE-434 9.8 Critical2023-07-30
CVE-2022-23166 Sysaid – Sysaid Local File Inclusion (LFI) 6.1 Medium2022-05-12
CVE-2022-23165 Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS) CWE-79 5.5 Medium2022-05-12
CVE-2022-22798 Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control 6.8 Medium2022-05-12
CVE-2022-22797 Sysaid – sysaid Open Redirect CWE-601 4.6 Medium2022-05-12
CVE-2022-22796 Sysaid – Sysaid System Takeover 7.0 High2022-05-12

All 10 known CVE vulnerabilities affecting SysAid with full Chinese analysis, references, and POCs where available.