| عنوان | Source Code & Projects Simple Food Ordering System V1.0 Unrestricted Upload |
|---|
| الوصف | An arbitrary file upload vulnerability was identified within the "/ordersimple/product.php" file of the "Simple Food Ordering System" project. The root cause is that the file upload functionality does not properly validate the file type, extension, or content. Attackers can upload malicious files (such as a webshell) to the server. Additionally, the server does not properly sanitize the filename, which may lead to overwriting existing files or uploading to unintended directories. |
|---|
| المصدر | ⚠️ https://github.com/kakalalaww/CVE/issues/17 |
|---|
| المستخدم | kakalalaww (UID 86294) |
|---|
| ارسال | 09/06/2025 05:32 PM (1 سنة منذ) |
|---|
| الاعتدال | 15/06/2025 09:03 PM (6 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 312636 [SourceCodester Simple Food Ordering System 1.0 /editproduct.php photo تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|