Design/Logic Flaw

2021-03-1620:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.5%

JSON

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).

CPENameOperatorVersion
online_ordering_systemeq1.0

CPE	Name	Operator	Version
	online_ordering_system	eq	1.0

References

www.exploit-db.com/exploits/49615