CVE-2019-18417

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution

published October 24, 2019

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to adequately sanitize user-supplied input, e.g., "add a new food" allows .php files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01730 · 77.4th percentile
Published
2019-10-24T17:30Z
EPSS history
Timeline
  • 24 OCT 17:30Z
    Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution
    cvelistv5