| tiêu đề | Code-Projects Simple Food Ordering System 1.0 Unrestricted Upload Vulnerability |
|---|
| Mô tả | During the security assessment of "Simple Food Ordering System", I detected a critical file upload vulnerability in the "addproduct.php" file. This vulnerability stems from inadequate validation mechanisms for uploaded files, particularly the lack of proper file type verification, content checking, and extension filtering. Attackers can bypass existing restrictions to upload malicious files, potentially gaining unauthorized access to the server, executing arbitrary commands, and compromising the entire system. Immediate remediation is essential to ensure system security. |
|---|
| Nguồn | ⚠️ https://github.com/tinggeogle01-lang/cve/issues/1 |
|---|
| Người dùng | passed (UID 91609) |
|---|
| Đệ trình | 14/10/2025 08:28 (cách đây 9 các tháng) |
|---|
| Kiểm duyệt | 28/10/2025 01:08 (14 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 330214 [code-projects Simple Food Ordering System 1.0 /addproduct.php photo nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|