critical9.8
CVE-2022-30887
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php.
Impact
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pharmacy Management System Project | Pharmacy Management System | Version 1.0 |