CVE-2021-28294: Unrestricted Upload of File with Dangerous Type

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution RCE...

PT-2021-17840

Name of the Vulnerable Software and Affected Versions: Online Ordering System version 1.0 Description: The issue allows for arbitrary file upload through the "/onlineordering/GPST/store/initiateorder.php" API endpoint, potentially leading to remote code execution RCE. Recommendations: For Online...