CVE-2019-10267
HIGHAhsay Cloud Backup Suite 7.7.0.0-8.1.0.50 - Unauthenticated Arbitrary File Upload RCE
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-10267.
PoCs published by Wietse Boonstra, including Metasploit module exploits/windows/misc/ahsay_backup_fileupload.
AI-analyzed exploit summary This exploit targets an insecure file upload vulnerability in Ahsay Backup software, allowing authenticated users to upload a JSP reverse shell for remote code execution. It leverages directory traversal to place the shell in a web-accessible directory and triggers it via HTTP request.
Description
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).
Exploits (3)
This exploit targets an insecure file upload vulnerability in Ahsay Backup software, allowing authenticated users to upload a JSP reverse shell for remote code execution. It leverages directory traversal to place the shell in a web-accessible directory and triggers it via HTTP request.
This Metasploit module exploits an authenticated insecure file upload vulnerability in Ahsay Backup (CVE-2019-10267) to achieve remote code execution, typically as SYSTEM. It supports account creation via trial functionality and targets both Windows and Linux environments.
This Metasploit module exploits an authenticated file upload vulnerability in Ahsay Backup (CVE-2019-10267) to achieve remote code execution. It supports account creation via trial functionality and uploads a malicious payload to a writable directory.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H