SourceCodester Online Food Ordering System Menu Form unrestricted upload
Vulnerability Description
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input <?php system($_GET['c']); ?> leads to unrestricted upload. The attack can be launched remotely. The identifier VDB-218185 was assigned to this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0257
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- DisguisedRoot (VulDB User)
More from SourceCodester
View All →Affected Vendor
SourceCodester
View all reports →