Full title: SysAid Help Desk Administrator Portal Arbitrary File Upload Exploit 
Category: remote exploits
Platform: java
This Metasploit module exploits a file upload vulnerability in SysAid Help Desk. The vulnerability exists in the ChangePhoto.jsp in the administrator portal, which does not handle correctly directory traversal sequences and does not enforce file extension restrictions. You need to have an administrator account, but there is a Metasploit auxiliary module that can create one for you. This Metasploit module has been tested in SysAid v14.4 in both Linux and Windows.

# 0day.today @ http://0day.today/