Skip to content
Fencer Intel
high 8.8

CVE-2019-10267 in the critical feed json

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50.

published 7y ago modified 4mo ago also EUVD-2019-2270

cvss
8.8
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
75.2%
EPSS 75.2% chance of exploitation in 30 days, percentile 99.5%
public exploits
3
Metasploit and Exploit-DB

Summary

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into any directory of the server. One can insert a JSP shell into the web server's directory and execute it. This leads to full access to the system, as the configured user (e.g., Administrator).

Patch / fix

  • ahsay cloud_backup_suite 8.1.1.50

Is CVE-2019-10267 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Timeline

  1. First public exploit (Metasploit exploit/windows/misc/ahsay_backup_fileupload)
  2. Published

Exploit prediction

75.17% chance of exploitation in the next 30 days, higher than 99.5% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • Metasploit exploit/windows/misc/ahsay_backup_fileupload Ahsay Backup v7.x-v8.1.1.50 (authenticated) file upload metasploit exploit, excellent rank, 2019-06-01
  • EDB-47180 Ahsay Backup 7.x - 8.1.1.50 - Authenticated Arbitrary File Upload / Remote Code Execution (Metasploit) webapps, 2019-07-26
  • EDB-47179 Ahsay Backup 8.1.1.50 - Insecure File Upload and Code Execution (Authenticated) webapps, 2019-07-26
  • wbsec.nl https://www.wbsec.nl/ahsay/ referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/153771/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.html referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/153770/Ahsay-Backup-7.x-8.x-File-Upload-Remote-Code-Execution.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.0 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C

Classification

Weakness
  • CWE-434 Unrestricted Upload of File with Dangerous Type

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.