Unrated severityNVD Advisory· Published Oct 24, 2019· Updated Aug 5, 2024

CVE-2019-18417

Description

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files.

Affected products

Sourcecodester/Restaurant Management Systemdescription
Restaurant Management System/Restaurant Management Systemllm-fuzzy
Range: =1.0

Patches

Vulnerability mechanics

References

www.sevenlayers.com/index.php/265-restaurant-management-system-1-0-arbitrary-file-uploadmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000