CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10267

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.662

EPSS Ranking 98.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2019-10267

Ahsay » Cloud Backup Suite » Version: 7.11.0.10

cpe:2.3:a:ahsay:cloud_backup_suite:7.11.0.10
Ahsay » Cloud Backup Suite » Version: 7.11.0.20

cpe:2.3:a:ahsay:cloud_backup_suite:7.11.0.20
Ahsay » Cloud Backup Suite » Version: 7.11.0.4

cpe:2.3:a:ahsay:cloud_backup_suite:7.11.0.4
Ahsay » Cloud Backup Suite » Version: 7.13.0.0

cpe:2.3:a:ahsay:cloud_backup_suite:7.13.0.0
Ahsay » Cloud Backup Suite » Version: 7.13.0.2

cpe:2.3:a:ahsay:cloud_backup_suite:7.13.0.2
Ahsay » Cloud Backup Suite » Version: 7.13.0.6

cpe:2.3:a:ahsay:cloud_backup_suite:7.13.0.6
Ahsay » Cloud Backup Suite » Version: 7.15.0.20

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.0.20
Ahsay » Cloud Backup Suite » Version: 7.15.0.8

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.0.8
Ahsay » Cloud Backup Suite » Version: 7.15.2.2

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.2.2
Ahsay » Cloud Backup Suite » Version: 7.15.4.10

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.4.10
Ahsay » Cloud Backup Suite » Version: 7.15.4.41

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.4.41
Ahsay » Cloud Backup Suite » Version: 7.15.6.38

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.6.38
Ahsay » Cloud Backup Suite » Version: 7.15.6.55

cpe:2.3:a:ahsay:cloud_backup_suite:7.15.6.55
Ahsay » Cloud Backup Suite » Version: 7.17.0.30

cpe:2.3:a:ahsay:cloud_backup_suite:7.17.0.30
Ahsay » Cloud Backup Suite » Version: 7.17.0.50

cpe:2.3:a:ahsay:cloud_backup_suite:7.17.0.50
Ahsay » Cloud Backup Suite » Version: 7.7.0.0

cpe:2.3:a:ahsay:cloud_backup_suite:7.7.0.0
Ahsay » Cloud Backup Suite » Version: 7.7.2.0

cpe:2.3:a:ahsay:cloud_backup_suite:7.7.2.0
Ahsay » Cloud Backup Suite » Version: 7.9.0.0

cpe:2.3:a:ahsay:cloud_backup_suite:7.9.0.0
Ahsay » Cloud Backup Suite » Version: 7.9.2.0

cpe:2.3:a:ahsay:cloud_backup_suite:7.9.2.0
Ahsay » Cloud Backup Suite » Version: 7.9.2.2

cpe:2.3:a:ahsay:cloud_backup_suite:7.9.2.2
Ahsay » Cloud Backup Suite » Version: 8.1.0.24

cpe:2.3:a:ahsay:cloud_backup_suite:8.1.0.24
Ahsay » Cloud Backup Suite » Version: 8.1.0.50

cpe:2.3:a:ahsay:cloud_backup_suite:8.1.0.50

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10267

Products

Pricing

Contact Us