Babapihai

**Name of the Vulnerable Software and Affected Versions** Emlog Pro version 2.5.7 **Description** Emlog Pro version 2.5.7 allows for unrestricted file uploads with dangerous file types via the `/emlog/admin/plugin.php?action=upload zip` API endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Restaurant Order System version 1.0 **Description** A SQL Injection issue exists in Restaurant Order System 1.0. A local attacker can obtain sensitive information via the `payment.php` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.