Skip to content
OpenAdvisories

Vendor

Kaseya

1 known vulnerabilities.

Products

KServer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2013-10034 Public exploit

    Kaseya < 6.3.0.2 uploadImage.asp Arbitrary File Upload RCE

    An unrestricted file upload vulnerability exists in Kaseya KServer versions prior to 6.3.0.2. The uploadImage.asp endpoint allows unauthenticated users to upload files to arbitrary paths via a crafted filename parameter in a multipart/form-data POST request. …

    Kaseya KServer