| शीर्षक | Source Code & Projects Simple Food Ordering System V1.0 Unrestricted Upload |
|---|
| विवरण | An arbitrary file upload vulnerability was identified within the "/ordersimple/product.php" file of the "Simple Food Ordering System" project. The root cause is that the file upload functionality does not properly validate the file type, extension, or content. Attackers can upload malicious files (such as a webshell) to the server. Additionally, the server does not properly sanitize the filename, which may lead to overwriting existing files or uploading to unintended directories. |
|---|
| स्रोत | ⚠️ https://github.com/kakalalaww/CVE/issues/17 |
|---|
| उपयोगकर्ता | kakalalaww (UID 86294) |
|---|
| सबमिशन | 09/06/2025 05:32 PM (1 वर्ष पहले) |
|---|
| संयम | 15/06/2025 09:03 PM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 312636 [SourceCodester Simple Food Ordering System 1.0 /editproduct.php photo अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|