CVE-2023-0943

Name of the Vulnerable Software and Affected Versions SourceCodester Best POS Management System version 1.0

Description A problematic issue has been found in the Image Handler component, affecting the function save settings of the file "index.php?page=site settings". The manipulation of the argument img with the input ../../shell.php leads to unrestricted upload. The attack can be initiated remotely.

Recommendations For SourceCodester Best POS Management System version 1.0, consider disabling the save settings function in the "index.php?page=site settings" file until a patch is available. Restrict access to the Image Handler component to minimize the risk of exploitation. Avoid using the img argument in the affected API endpoint until the issue is resolved.