Submit #880371: SourceCodester Simple Online Food Ordering System using PHP/MySQL with Full Source Code (2020) /fos/admin/ajax.php?action=save_menu v1.0 Unrestricted Uploadinfo

TitleSourceCodester Simple Online Food Ordering System using PHP/MySQL with Full Source Code (2020) /fos/admin/ajax.php?action=save_menu v1.0 Unrestricted Upload
DescriptionA vulnerability, which was classified as critical, was found in sourcecodester Simple Online Food Ordering System 1.0. This affects some unknown functionality of the file /fos/admin/ajax.php . The manipulation of the argument with an unknown input leads to a unrestricted upload vulnerability. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. This is going to have an impact on confidentiality, integrity, and availability.
Source⚠️ https://github.com/hubdk01/cve/issues/1
User
 hubdk01 (UID 99481)
Submission07/05/2026 05:16 (2 months ago)
Moderation08/20/2026 09:17 (2 months later)
StatusAccepted
VulDB entry393618 [SourceCodester Simple Online Food Ordering System 1.0 ajax.php?action=save_menu img unrestricted upload]
Points20

Do you want to use VulDB in your project?

Use the official API to access entries easily!