CVE-2015-2996

Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileName parameter to getGfiUpgradeFile or (2) cause a denial of service (CPU and memory consumption) via a .. (dot dot) in the fileName parameter to calculateRdsFileChecksum.

• CWE-22

• http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2015/Jun/8Exploit
• http://www.securityfocus.com/archive/1/535679/100/0/threaded
• http://www.securityfocus.com/bid/75038
• https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-deskVendor Advisory
• http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2015/Jun/8Exploit
• http://www.securityfocus.com/archive/1/535679/100/0/threaded
• http://www.securityfocus.com/bid/75038
• https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-deskVendor Advisory

Published

Jun 8, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2990Directory traversal vulnerability in zhtml.cgi in NEOJAPAN d…
• CVE-2015-2991Buffer overflow in NScripter before 3.00 allows remote attac…
• CVE-2015-2992Apache Struts before 2.3.20 has a cross-site scripting (XSS)…6.1
• CVE-2015-2993SysAid Help Desk before 15.2 does not properly restrict acce…
• CVE-2015-2994Unrestricted file upload vulnerability in ChangePhoto.jsp in…
• CVE-2015-2995The RdsLogsEntry servlet in SysAid Help Desk before 15.2 doe…
• CVE-2015-2997SysAid Help Desk before 15.2 allows remote attackers to obta…
• CVE-2015-2998SysAid Help Desk before 15.2 uses a hardcoded encryption key…
• CVE-2015-2999Multiple SQL injection vulnerabilities in SysAid Help Desk b…
• CVE-2015-3000SysAid Help Desk before 15.2 allows remote attackers to caus…
• CVE-2015-3001SysAid Help Desk before 15.2 uses a hardcoded password of Pa…
• CVE-2015-3002Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.…