Sourcecodester Restaurant Management System vulnerabilities

2 CVEs affecting Sourcecodester Restaurant Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-18417, published 2019-10-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-18417, published 2019-10-24. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution. The issue occurs because the application fails to…
CVE-2019-18414, published 2019-10-24. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker…