CVE-2021-41644

This exploit targets an unauthenticated file upload vulnerability in Online Food Ordering System 2.0, allowing RCE by uploading a malicious PHP file that bypasses image upload filters. The exploit automates the upload and provides a webshell for command execution.

This PoC exploits an unauthenticated file upload vulnerability in Online Food Ordering System 2.0, allowing RCE via a maliciously crafted PHP file that bypasses image upload filters. It uploads a PHP webshell and provides interactive command execution.