SysAid Help Desk 'rdslogs' Arbitrary File Upload

This module exploits a file upload vulnerability in SysAid Help Desk v14.3 and v14.4. The vulnerability exists in the RdsLogsEntry servlet which accepts unauthenticated file uploads and handles zip file contents in an insecure way. By combining both weaknesses, a remote attacker can accomplish...

SysAid Help Desk 'rdslogs' Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'zlib' class Metasploit3 "SysAid Help Desk 'rdslogs' Arbitrary File Upload", 'Description' = %q This module exploits a file upload vulnerabilit...

SysAid Help Desk 'rdslogs' Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'zlib' class Metasploit3 "SysAid Help Desk 'rdslogs' Arbitrary File Upload", 'Description' = %q This module exploits a file upload vulnerabilit...

SysAid Help Desk Detection (HTTP)

HTTP based detection of the SysAid Help Desk Software. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SysAid Path < 15.2 Directory Traversal Vulnerability

SysAid Help Desktop Software is prone to a path traversal vulnerability SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SysAid Help Desk 14.4 - Multiple Vulnerabilities

SysAid Help Desk 14.4 - Multiple Vulnerabilities Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated:...

SysAid Help Desk 14.4 - Multiple Vulnerabilities

Multiple vulnerabilities in SysAid Help Desk 14.4 Discovered by Pedro Ribeiro [email protected], Agile Information Security ================================================================================= Disclosure: 03/06/2015 / Last updated: 10/06/2015 Background on the affected product: "SysAi...

SysAid Help Desk Directory Traversal Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. The SysAid Help Desk /sysaid/getGfiUpgradeFile URI and /sysaid/calculateRdsFileChecksum URI fails to adequately filter the 'fileName' parameter, allowing remote attackers to exploit a vulnerability to submit a special directory...

SysAid Help Desk Restriction Bypass Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SysAid Help Desk does not properly restrict the use of specific features, allowing remote attackers to send specially crafted requests to create an administrator account using the /createnewaccount URI or write to arbitrary files...

SysAid Help Desk Hardcoded Key Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SysAid Help Desk has a built-in hard-coded vulnerability that could be exploited by a remote attacker to gain unauthorized access to the key...

SysAid Help Desk Denial of Service Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. A security vulnerability exists in SysAid Help Desk that allows remote attackers to leverage entities referenced in XML documents with agententry, /rdsmonitoringresponse, or /androidactions URIs, which can lead to a denial of servic...

SysAid Help Desk Built-in Password Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SysAid Help Desk uses a hard-coded password, username: sa, password: Password1, through which remote attackers bypass access restrictions...

SysAid Help Desk .jsp File Upload Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. An arbitrary file upload vulnerability in the SysAid Help Desk ChangePhoto.jsp script allows remote attackers to submit a special .jsp file and execute it...

SysAid Help Desk SQL Injection Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SQL injection vulnerability in multiple scripts in SysAid Help Desk allows remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

SysAid Help Desk Arbitrary File Upload Vulnerability

SysAid Help Desk is a suite of Web-based IT management software. SysAid Help Desk fails to check file extensions, allowing remote attackers to upload and execute arbitrary files by submitting extensions containing null bytes...

CVE-2015-3001

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password...

CVE-2015-3000

SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service CPU and memory consumption via a large number of nested entity references in an XML document to 1 /agententry, 2 /rdsmonitoringresponse, or 3 /androidactions, aka an XML Entity Expansion XEE attack...

CVE-2015-2999

Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the 1 groupFilter parameter in an AssetDetails report to /genericreport, customSQL parameter in a 2 TopAdministratorsByAverageTimer report or an 3 ActiveRequest...

CVE-2015-2998

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml...

CVE-2015-2997

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFile, as demonstrated by a large directory traversal sequence, which reveals the installation path in an error message...