CVE-2015-2993

The exploit demonstrates multiple vulnerabilities in SysAid Help Desk 14.4, including unauthenticated administrator account creation, file upload via directory traversal, arbitrary file download, and SQL injection. It provides detailed technical steps and payloads for each vulnerability.

This Metasploit module exploits an unauthenticated administrator account creation vulnerability in SysAid Help Desk by sending a crafted HTTP GET request to the 'createnewaccount' endpoint. It creates a new admin account with specified credentials, though verification must be done manually.