Pharmacy Management System Arbitrary File Upload Vulnerability

Pharmacy Management System (MPMS) is a multi-lingual pharmacy management system developed by Mayuri K. The Pharmacy Management System v1.0 version is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the add.php file of the component Avatar Image Handler. php file in the component Avatar Image Handler lacks validation for uploaded files, which can be exploited to upload malicious files and remotely execute arbitrary code.