PT-2022-26819 · Unknown · Canteen Management System

Gwendal Le Coguic

·

CVE-2022-43265

·

Published

2022-11-15

·

Updated

2022-11-17

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Canteen Management System version 1.0
Description The issue concerns an arbitrary file upload vulnerability in the /pages/save user.php component, allowing attackers to execute arbitrary code by uploading a crafted PHP file.
Recommendations For Canteen Management System version 1.0, consider disabling the file upload functionality in the /pages/save user.php component until a patch is available to prevent arbitrary code execution. Restrict access to this component to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-43265

Affected Products

Canteen Management System