Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability via the productimage parameter at /farm/product.php.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')