Sourcecodester Web-based Pharmacy Product Management System 1.0 - Unrestricted File Upload via Content-Type Spoofing
Sourcecodester Web-based Pharmacy Product Management System v.1.0 has a file upload vulnerability. An attacker can upload a PHP file disguised as an image by modifying the Content-Type header to image/jpg.