CVE-2019-10267

This exploit targets an insecure file upload vulnerability in Ahsay Backup software, allowing authenticated users to upload a JSP reverse shell for remote code execution. It leverages directory traversal to place the shell in a web-accessible directory and triggers it via HTTP request.

This Metasploit module exploits an authenticated insecure file upload vulnerability in Ahsay Backup (CVE-2019-10267) to achieve remote code execution, typically as SYSTEM. It supports account creation via trial functionality and targets both Windows and Linux environments.

This Metasploit module exploits an authenticated file upload vulnerability in Ahsay Backup (CVE-2019-10267) to achieve remote code execution. It supports account creation via trial functionality and uploads a malicious payload to a writable directory.