CVE-2019-10267
26.07.2019, 21:15
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).Enginsight
| Vendor | Product | Version |
|---|---|---|
| ahsay | cloud_backup_suite | 7.7.0.0 ≤ 𝑥 < 8.1.1.50 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References