Arbitrary File Upload Vulnerability in Sourcecodester Restaurant Management System
CVE-2019-18417
8.8HIGH
What is CVE-2019-18417?
The Sourcecodester Restaurant Management System 1.0 contains a security flaw that allows authenticated users to upload arbitrary files due to insufficient input validation. This weakness enables attackers to upload malicious files, such as .php scripts, potentially leading to unauthorized code execution on the server. Proper sanitation of user inputs is critical to prevent such vulnerabilities and ensure the security of the application.