PT-2026-79037 · Sourcecodester · Simple Online Food Ordering System

Hubdk01

·

CVE-2026-76995

·

Publicado

2026-08-20

·

Atualizado

2026-08-20

CVSS v3.1

4.7

Média

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save menu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Exploit

Correção

Unrestricted File Upload

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-434CWE-284

Identificadores relacionados

CVE-2026-76995

Produtos afetados

Simple Online Food Ordering System