{"uuid": "c5484adb-9a96-495c-a9b4-25da7e862d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2993", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/sysaid_admin_acct.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in SysAid Help Desk that allows an unauthenticated\\n          user to create an administrator account. Note that this exploit will only work once. Any\\n          subsequent attempts will fail. On the other hand, the credentials must be verified\\n          manually. This module has been tested on SysAid 14.4 in Windows and Linux.\", \"disclosure_date\": \"2015-06-03\", \"fullname\": \"auxiliary/admin/http/sysaid_admin_acct\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"SysAid Help Desk Administrator Account Creation\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/sysaid_admin_acct.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/sysaid_admin_acct\", \"references\": [\"CVE-2015-2993\", \"URL-https://seclists.org/fulldisclosure/2015/Jun/8\", \"URL-https://github.com/pedrib/PoC/blob/master/advisories/sysaid-14.4-multiple-vulns.txt\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:49.829491Z"}