CVE-2019-10267: Malicious File Upload
An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10267?
CVE-2019-10267 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2019-10267?
To fix CVE-2019-10267, upgrade Ahsay Cloud Backup Suite to version 8.1.1.50 or later.
What type of vulnerability is CVE-2019-10267?
CVE-2019-10267 is an insecure file upload vulnerability that allows code execution on the server.
What are the risks associated with CVE-2019-10267?
The risks of CVE-2019-10267 include unauthorized access to the system and potential data compromise.
Which software versions are affected by CVE-2019-10267?
CVE-2019-10267 affects Ahsay Cloud Backup Suite versions between 7.7.0.0 and 8.1.0.50.