296,336
Total vulnerabilities in the database
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.
| Software | From | Fixed in |
|---|---|---|
| sysaid / sysaid | - | 15.1.x |