CVE-2015-6922

This Metasploit module exploits an arbitrary file upload vulnerability in Kaseya VSA (CVE-2015-6922) by uploading an ASP payload to a guessed directory path, leading to remote code execution with IUSR privileges.

This exploit demonstrates multiple vulnerabilities in Kaseya VSA, including unauthenticated privilege escalation and remote code execution via file upload with directory traversal. It includes a Ruby script for authenticated arbitrary file upload (CVE-2015-6589) and references Metasploit modules for unauthenticated exploits (CVE-2015-6922).

This Metasploit module exploits an authentication bypass in Kaseya VSA (CVE-2015-6922) to create a Master Administrator account by abusing the `setAccount.aspx` page, which is improperly restricted to localhost. It automates the process of extracting a session value and submitting a crafted POST request to create the account.

This Metasploit module exploits an arbitrary file upload vulnerability in Kaseya VSA (CVE-2015-6922) to achieve remote code execution. It uploads an ASP payload to a guessed directory path and triggers execution via HTTP request.