PT-2022-19756
CVE-2022-29651
·
تاريخ النشر
2022-05-25
·
تاريخ التحديث
2022-06-03
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Online Food Ordering System version 1.0
Description
The issue is related to an arbitrary file upload vulnerability in the Select Image function, allowing attackers to execute arbitrary code via a crafted PHP file. This can potentially lead to code execution on the server.
Recommendations
For Online Food Ordering System version 1.0, consider disabling the Select Image function until a patch is available to prevent exploitation of the arbitrary file upload vulnerability. Restrict access to the image upload feature to minimize the risk of malicious file uploads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾