PT-2022-23554 · Unknown · Ingredients Stock Management System
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Ingredients Stock Management System version 1.0
Description
The issue allows for arbitrary file deletion via the /classes/Master.php component, specifically through the
f parameter set to delete img.Recommendations
For Ingredients Stock Management System version 1.0, consider restricting access to the /classes/Master.php component, specifically the
delete img function, until a patch is available. As a temporary workaround, avoid using the f parameter set to delete img in the affected component to minimize the risk of exploitation.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ingredients Stock Management System