| Package | Affected versions | Patched versions |
|---|---|---|
| ultimatepos | = 2.5 |
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free