Lucene search
China National Vulnerability DatabaseCNVD-2023-06523HistoryJan 17, 2023 - 12:00 a.m.
Online Food Ordering System Arbitrary File Upload Vulnerability (CNVD-2023-06523)
2023-01-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
online food ordering system
arbitrary file upload
vulnerability
lack of validation
menu form
malicious files
remote code execution
0.002 Low
EPSS
Percentile
58.9%
Online Food Ordering System is an online food ordering system. An arbitrary file upload vulnerability exists in Online Food Ordering System, which stems from the lack of valid validation of uploaded files in the component Menu Form’s file /fos/admin/index.php?page=menu. An attacker can exploit this vulnerability to upload malicious files to remotely execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| online food ordering system online food ordering system | eq | 2.0 |
Related
prion
prion
Out-of-bounds
2023-01-12 22:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-0257
2023-01-12 22:15:09
cve
cve
CVE-2023-0257
2023-01-12 22:15:09