cve/2015/CVE-2015-2993.md

CVE-2015-2993

Description

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator accounts via a crafted request to /createnewaccount or (2) write to arbitrary files via the fileName parameter to /userentry.

POC

Reference

• http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html
• http://seclists.org/fulldisclosure/2015/Jun/8

Github

No PoCs found on GitHub currently.