CVE-2018-17139

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with…

published September 17, 2018

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03074 · 87.6th percentile
Published
2018-09-17T06:00Z
EPSS history
Timeline
  • 17 SEP 06:00Z
    UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with…
    cvelistv5