Arbitrary File Upload Vulnerability in Sourcecodester Restaurant Management System
CVE-2019-18417

8.8HIGH

Key Information:

Vendor
Sourcecodester
Status
Restaurant Management System
Vendor
CVE Published:
24 October 2019

Summary

The Sourcecodester Restaurant Management System 1.0 contains a security flaw that allows authenticated users to upload arbitrary files due to insufficient input validation. This weakness enables attackers to upload malicious files, such as .php scripts, potentially leading to unauthorized code execution on the server. Proper sanitation of user inputs is critical to prevent such vulnerabilities and ensure the security of the application.

References

https://www.sevenlayers.com/index.php/265-restaurant-mana...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.