{"uuid": "f6bc57cf-ac5f-428e-b5a6-630f844cc942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2996", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/sysaid_sql_creds.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in SysAid Help Desk that allows an unauthenticated\\n          user to download arbitrary files from the system. This is used to download the server\\n          configuration file that contains the database username and password, which is encrypted\\n          with a fixed, known key. This module has been tested with SysAid 14.4 on Windows and Linux.\", \"disclosure_date\": \"2015-06-03\", \"fullname\": \"auxiliary/admin/http/sysaid_sql_creds\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"SysAid Help Desk Database Credentials Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/sysaid_sql_creds.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/sysaid_sql_creds\", \"references\": [\"CVE-2015-2996\", \"CVE-2015-2998\", \"URL-https://seclists.org/fulldisclosure/2015/Jun/8\", \"URL-https://github.com/pedrib/PoC/blob/master/advisories/sysaid-14.4-multiple-vulns.txt\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:50.147616Z"}