{"uuid": "3c252cc1-9c7d-4eca-93d3-ad3b20b17b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-10267", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ahsay_backup_fileupload.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Wietse Boonstra\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authenticated insecure file upload and code\\n          execution flaw in Ahsay Backup v7.x - v8.1.1.50. To successfully\\n          execute the upload,\\n          credentials are needed; default Ahsay Backup trial accounts are enabled\\n          so an account can be created.\\n\\n          It can be exploited in Windows and Linux environments to get remote code\\n          execution (usually as SYSTEM). This module has been tested\\n          on Ahsay Backup v8.1.1.50 with Windows 2003 SP2 Server. Because of this\\n          flaw all connected clients can be configured to execute a command before\\n          the backup starts. Allowing an attacker to takeover even more systems\\n          and make it rain shells!\\n\\n          Setting the CREATEACCOUNT to true will create a new account, this is\\n          enabled by default.\\n          If credeantials are known enter these and run the exploit.\", \"disclosure_date\": \"2019-06-01\", \"fullname\": \"exploit/windows/misc/ahsay_backup_fileupload\", \"is_install_path\": true, \"mod_time\": \"2026-07-29 21:22:27 +0000\", \"name\": \"Ahsay Backup v7.x-v8.1.1.50 (authenticated) file upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/ahsay_backup_fileupload.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"windows/misc/ahsay_backup_fileupload\", \"references\": [\"CVE-2019-10267\", \"URL-https://www.wbsec.nl/ahsay/\", \"URL-http://ahsay-dn.ahsay.com/v8/81150/cbs-win.exe\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Windows x86\", \"Linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:14.595678Z"}