CVE-2017-15990

Critical

Published: 31/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.

An attacker can upload malicious files, potentially leading to system compromise or data leakage.

It is recommended to implement file upload validation and restrict allowed file types.

Original NVD description (English source)

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.