| शीर्षक | Online Pizza Ordering System v1.0 /php-opos/admin/ajax.php?action=save_settings post form-data parameter filename exists arbitrary file upload |
|---|
| विवरण | Online Pizza Ordering System v1.0 was dicovered to exists an arbtrary fle upload vulnerability at /php-opos/admin/ajax.php?action=save_settings post form-data parameter filename.
This vulnerability allows an attacker to execute arbitrary code.
Steps to reproduce
1.Go to the Admin Site
2.Click on Site Settings,You can upload any file at the upload image location
3.Upload phpinfo
4.We visited the directory of the file in the browser and found that the code had been executed |
|---|
| स्रोत | ⚠️ https://github.com/ZERO-XX-ONE/bug_report/blob/main/UPLOAD.md |
|---|
| उपयोगकर्ता | garrett (UID 44178) |
|---|
| सबमिशन | 01/04/2023 04:55 PM (4 साल पहले) |
|---|
| संयम | 02/04/2023 08:52 AM (16 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 222979 [SourceCodester Online Pizza Ordering System 1.0 save_menu अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|