CVE-2019-18414

CVE-2019-18414 affects Sourcecodester Restaurant Management System 1.0. The vulnerability is an admin/staff-exec.php Cross-Site Request Forgery due to missing CSRF protection, allowing an attacker to trick an administrator into performing unintended actions (e.g., executing arbitrary code or addi...

CVE-2019-18417

CVE-2019-18417 affects Sourcecodester Restaurant Management System 1.0. An authenticated attacker can upload arbitrary files (e.g., PHP) due to inadequate input sanitization, enabling code execution. Multiple sources (NVD entry and Red Hat advisory) confirm the issue, with impact described as hig...