Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ directory under the web root.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Midicart_php_shopping_cart | Midicart_software | * | * |