CVE-2021-30486

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1).

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jul 22, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-304872.7In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizat CVE-2021-30494.3An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with i CVE-2021-304907.8upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Aut CVE-2021-304935.5Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBr CVE-2021-304945.5Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Ch CVE-2021-304965.7The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an at CVE-2021-304977.5Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath CVE-2021-304987.8A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential c CVE-2021-304997.8A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential cons CVE-2021-30508.8An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbit CVE-2021-305007.8Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute ar CVE-2021-305015.5An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of serv