CVE-2019-18417

Name of the Vulnerable Software and Affected Versions Sourcecodester Restaurant Management System version 1.0

Description The issue allows an authenticated attacker to upload arbitrary files, potentially resulting in code execution. This occurs due to inadequate sanitization of user-supplied input. For example, the "add a new food" feature allows the upload of .php files.

Recommendations For Sourcecodester Restaurant Management System version 1.0, consider disabling the file upload feature, particularly for the "add a new food" functionality, until a proper fix is implemented to sanitize user input and prevent arbitrary file uploads.