Kaseya VSA uploader.aspx Arbitrary File Upload
Posted by deepcore on October 3, 2015 – 8:25 am
This Metasploit module exploits an arbitrary file upload vulnerability found in Kaseya VSA versions between 7 and 9.1. A malicious unauthenticated user can upload an ASP file to an arbitrary directory leading to arbitrary code execution with IUSR privileges. This Metasploit module has been tested with Kaseya v7.0.0.17, v8.0.0.10 and v9.0.0.3.
Post a reply
You must be logged in to post a comment.