CVE-2024-1268 – CodeAstro Restaurant POS System update_product.php unrestricted upload

https://notcve.org/view.php?id=CVE-2024-1268

A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file update_product.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://drive.google.com/drive/folders/1utXNnlH67FjUaBsYhw1cQWyZsO9MLy1i?usp=sharing https://vuldb.com/?ctiid.253011 https://vuldb.com/?id.253011 • CWE-434: Unrestricted Upload of File with Dangerous Type •