EDB-41691

functional

SysAid Help Desk Administrator Portal < 14.4 - Arbitrary File Upload (Metasploit)

view exploit source exploit_dbverifiedtype webappsauthor Metasploitpublished 2015-06-03catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-2994USmedium6.5Exploit
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp ext…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan