UL
Vendor
Ultimatefosters
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-60503 | UL Ultimatepos Ultimatefosters | 8.7 | Nov 3 | A cross-site scripting (XSS) vulnerability exists in the administrative interface of ultimatefosters UltimatePOS 4.8 where input submitted in the purchase functionality is… |
| CVE-2018-17139 | UL Ultimatepos Ultimatefosters | 8.8 | Sep 17 | UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg… |