| शीर्षक | SourceCodester Online Food Ordering System 2.0 Access Bypass |
|---|
| विवरण | A vulnerability was found in SourceCodester Online Food Ordering System 2.0, a remote unauthenticated attacker could exploit this vulnerability by sending a crafted request.POST operations to /fos/admin/ajax.php?action=save_settings could be done without a cookie in it's header. Which will result in unauthenticated change of /fos/index.php?page=about and unauthenticated file upload.
|
|---|
| स्रोत | ⚠️ Update to a non-vulnerable version of the product or apply the vendor-supplied patch: https://www.sourcecodester.com/php/14951/online-food-ordering-system-php-and-sqlite-database-free-source-code.html |
|---|
| उपयोगकर्ता | WWesleywww (UID 43117) |
|---|
| सबमिशन | 16/03/2023 12:09 PM (4 साल पहले) |
|---|
| संयम | 16/03/2023 01:49 PM (2 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 223214 [SourceCodester Online Food Ordering System 2.0 POST Request ajax.php?action=save_settings अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|