CVE

Id
80271  
CVE No.
CVE-2015-2994  
Status
Candidate  
Description
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/.  
Phase
Assigned (20150407)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
726290 80271 CVE-2015-2994 BUGTRAQ:20150603 [Multiple CVE"s]: various critical vulnerabilities in SysAid Help Desk (RCE, file download, DoS, etc)  View
726291 80271 CVE-2015-2994 URL:http://www.securityfocus.com/archive/1/archive/1/535679/100/0/threaded  View
726292 80271 CVE-2015-2994 FULLDISC:20150603 [Multiple CVE"s]: various critical vulnerabilities in SysAid Help Desk (RCE, file download, DoS, etc)  View
726293 80271 CVE-2015-2994 URL:http://seclists.org/fulldisclosure/2015/Jun/8  View
726294 80271 CVE-2015-2994 MISC:http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html  View
726295 80271 CVE-2015-2994 CONFIRM:https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk  View
726296 80271 CVE-2015-2994 BID:75038  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7304 JVNDB-2015-002624 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-3046 80271 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002624.html  View