CVE-2015-2994

Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a…

published June 8, 2015

CVSS
—
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a file with a .jsp extension, then accessing it via a direct request to the file in icons/user_photo/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.49791 · 98.9th percentile
Published
2015-06-08T14:00Z
EPSS history
Timeline
  • 08 JUN 14:00Z
    Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by uploading a…
    cvelistv5