High · 7.2 CVE-2022-43085 EUVD-2022-46134GHSA-9g68-8w7w-hfcv

An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a cr…

Published Nov 1, 2022 · Updated May 5, 2025 · Assigned by mitre

Description

An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

References

https://github.com/Tr0e/CVE_Hunter/blob/main/RCE-3.md