SourceCodester Online Food Ordering System 2.0 POST Request ajax.php escalada de privilegios

Una vulnerabilidad ha sido encontrada en SourceCodester Online Food Ordering System 2.0 y clasificada como crítica. Una función desconocida del archivo /fos/admin/ajax.php?action=save_settings del componente POST Request Handler es afectada por esta vulnerabilidad. Por la manipulación de un input desconocido se causa una vulnerabilidad de clase escalada de privilegios. La vulnerabilidad es identificada como CVE-2023-1432. El ataque puede ser realizado a través de la red. Los detalles técnicos son conocidos. Fue declarado como no está definido. Una solución posible ha sido publicada antes y no simplemente después de la publicación de la vulnerabilidad.

Campo2023-03-16 13:542023-04-08 16:212023-04-08 16:28
vendorSourceCodesterSourceCodesterSourceCodester
nameOnline Food Ordering SystemOnline Food Ordering SystemOnline Food Ordering System
version2.02.02.0
componentPOST Request HandlerPOST Request HandlerPOST Request Handler
file/fos/admin/ajax.php?action=save_settings/fos/admin/ajax.php?action=save_settings/fos/admin/ajax.php?action=save_settings
cwe284 (escalada de privilegios)284 (escalada de privilegios)284 (escalada de privilegios)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_rcUUU
cveCVE-2023-1432CVE-2023-1432CVE-2023-1432
responsibleVulDBVulDBVulDB
date1678921200 (2023-03-16)1678921200 (2023-03-16)1678921200 (2023-03-16)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_rcUCUCUC
cvss2_vuldb_eNDNDND
cvss2_vuldb_rlNDNDND
cvss3_vuldb_eXXX
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore7.57.57.5
cvss2_vuldb_tempscore6.86.86.8
cvss3_vuldb_basescore7.37.37.3
cvss3_vuldb_tempscore6.86.86.8
cvss3_meta_basescore7.37.38.1
cvss3_meta_tempscore6.86.88.0
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1678921200 (2023-03-16)1678921200 (2023-03-16)
cve_nvd_summaryA vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss2_nvd_avN
cvss2_nvd_acL
cvss2_nvd_auN
cvss2_nvd_ciP
cvss2_nvd_iiP
cvss2_nvd_aiP
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prN
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iL
cvss3_cna_aL
cve_cnaVulDB
cvss2_nvd_basescore7.5
cvss3_nvd_basescore9.8
cvss3_cna_basescore7.3

Might our Artificial Intelligence support you?

Check our Alexa App!