CVE-2023-5796

CVE-2023-5796 affects CodeAstro POS System 1.0, where an unknown functionality in the Logo Handler’s /setting file allows unrestricted upload. The issue can be triggered remotely and has been publicly disclosed. APT-PT security advisory notes this as a critical flaw in Logo Handler, enabling arbi...

CVE-2023-5795

CVE-2023-5795 concerns CodeAstro POS System 1.0. The vulnerability affects an unknown function within the Profile Picture Handler component (file path: /profil), enabling an unrestricted upload. The issue is described as critical and can be triggered remotely; the exploit has been publicly disclo...