| शीर्षक | Sourcecodeste Online Food Ordering System v2 using PHP8 and MySQL Free Source Code v2.0 File Upload Remote Code Execution |
|---|
| विवरण | During a comprehensive security assessment of "Online Food Ordering System", a critical file upload vulnerability was identified in the "/admin/ajax.php?action=save_menu". This vulnerability arises from the application's inadequate validation of user-uploaded files. Attackers can leverage this flaw to upload malicious PHP files without any authentication. The uploaded filename uses a predictable timestamp format (minute-level, seconds always 00), allowing attackers to easily guess the file path and execute arbitrary commands. Immediate remediation is crucial to mitigate these risks. |
|---|
| स्रोत | ⚠️ https://github.com/Mikkoseven/cve/issues/5 |
|---|
| उपयोगकर्ता | Jxsec (UID 98275) |
|---|
| सबमिशन | 15/05/2026 03:59 PM (5 महीनों पहले) |
|---|
| संयम | 02/06/2026 05:47 PM (18 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 228023 [Online Food Ordering System 2.0 ajax.php?action=save_menu अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|