2 matches found
CVE-2018-17139
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type...
8.8CVSS8.9AI score0.03074EPSS
SaveExploits1References1
Command injection
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type...
6.5CVSS8.9AI score0.03074EPSS
SaveExploits1References1Affected Software1
20