SysAid Multiple Security Vulnerabilities

Bugtraq ID:	75038
Class:	Unknown
CVE:	CVE-2015-2993 CVE-2015-2994 CVE-2015-2995 CVE-2015-2996 CVE-2015-2997 CVE-2015-2999 CVE-2015-3000
Remote:	Yes
Local:	No
Published:	Jun 03 2015 12:00AM
Updated:	Jun 03 2015 12:00AM
Credit:	Pedro Ribeiro
Vulnerable:	SysAid SysAid 14.4
Not Vulnerable:	SysAid SysAid 15.2

SysAid Multiple Security Vulnerabilities

SysAid is prone to multiple security vulnerabilities, including:

1. A security-bypass vulnerability
2. An arbitrary file-write vulnerability
3. Multiple arbitrary file-upload vulnerabilities
5. An arbitrary file-download vulnerability
6. A denial-of-service vulnerability
7. A path disclosure vulnerability
8. Multiple SQL-injection vulnerabilities

Attackers can exploit these issues to upload, write, or download arbitrary files; cause a denial-of-service; disclose sensitive information; bypass security restrictions; compromise the application, access or modify data, or exploit latent vulnerabilities in the context of the affected application. Other attacks may also be possible.

SysAid Multiple Security Vulnerabilities

An attacker can use a browser to exploit these issues.

The researcher who discovered this issue has created proof-of-concepts. Please see the references for more information.

SysAid Multiple Security Vulnerabilities

References:

• [Multiple CVE's]: various critical vulnerabilities in SysAid Help Desk (RCE, fil (Pedro Ribeiro)
  
• SysAid HomePage (SysAid)