PT-2022-19756

CVE-2022-29651

·

Published

2022-05-25

·

Updated

2022-06-03

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Online Food Ordering System version 1.0
Description The issue is related to an arbitrary file upload vulnerability in the Select Image function, allowing attackers to execute arbitrary code via a crafted PHP file. This can potentially lead to code execution on the server.
Recommendations For Online Food Ordering System version 1.0, consider disabling the Select Image function until a patch is available to prevent exploitation of the arbitrary file upload vulnerability. Restrict access to the image upload feature to minimize the risk of malicious file uploads.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾