CVE-2015-2994

This Metasploit module exploits an arbitrary file upload vulnerability in SysAid Help Desk's ChangePhoto.jsp, allowing authenticated attackers to upload a malicious JSP file for remote code execution. It supports both Linux and Windows targets and includes automatic target detection.

This is a detailed technical writeup describing multiple vulnerabilities in SysAid Help Desk 14.4, including administrator account creation, file upload via directory traversal, arbitrary file download, path disclosure, hard-coded cryptographic key usage, and SQL injection. The writeup provides specific technical details, such as affected endpoints, payloads, and constraints for each vulnerability.

This Metasploit module exploits a file upload vulnerability in SysAid Help Desk's ChangePhoto.jsp, allowing arbitrary file upload via directory traversal and weak file extension handling. It requires administrator credentials and has been tested on SysAid v14.4 for both Linux and Windows.