What’s Vulnerable › Vulnerabilities

CVE-2023-0943: SourceCodester Best POS Management System Image save_settings unrestricted upload

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-21 · updated 2026-08-19
• Weakness: CWE-434

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler. The manipulation of the argument img with the input ../../shell.php leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-221591.

Affected products

• SourceCodester Best POS Management System: 1.0

References

• https://vuldb.com/?ctiid.221591
• https://vuldb.com/?id.221591
• https://vuldb.com/?ctiid.221591
• https://vuldb.com/?id.221591

Get alerted when CVE-2023-0943 or the next vulnerability affects your stack