High severity8.8NVD Advisory· Published Sep 17, 2018· Updated Jun 17, 2026
CVE-2018-17139
CVE-2018-17139
Description
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 2.5
- cpe:2.3:a:ultimatefosters:ultimatepos:2.5:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.exploit-db.com/exploits/45253/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.