CVE-2015-3001

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.82%

Published

Jun 8, 2015

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBSysAid Help Desk 14.4 - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

Weaknesses (CWE)

CWE-255

Affected Products (1)

sysaid · sysaidvulnerable

References (10)

http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html

Exploit

http://seclists.org/fulldisclosure/2015/Jun/8

Exploit

http://www.securityfocus.com/archive/1/535679/100/0/threaded

http://www.securityfocus.com/bid/75035

https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk

Vendor Advisory

http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html

Exploit

http://seclists.org/fulldisclosure/2015/Jun/8

Exploit

http://www.securityfocus.com/archive/1/535679/100/0/threaded

http://www.securityfocus.com/bid/75035

https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs