medium4.7Public exploit code
CVE-2023-0943
A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Best pos Management System v1.0 - Remote Code Execution (RCE) on File Upload2023-04-06 · webapps · php · Verified
Impact
A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler. The manipulation of the argument img with the input ../../shell.php leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221591.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mayurik | Best Pos Management System | Version 1.0 |