CVE-2018-17139
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg co…
Published: 2018-09-17 · CVSS: Unscored
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7