CVE-2023-0257

MEDIUM

SourceCodester Online Food Ordering System 2.0 - Unrestricted Upload

Title source: llm

Description

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input <?php system($_GET['c']); ?> leads to unrestricted upload. The attack can be launched remotely. The identifier VDB-218185 was assigned to this vulnerability.

References (2)

Core 2

Core References

Permissions Required, Third Party Advisory vdb-entry technical-description

https://vuldb.com/?id.218185

Third Party Advisory signature

https://vuldb.com/?ctiid.218185

Scores

CVSS v3 4.7

EPSS 0.0036

EPSS Percentile 58.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-434

Status published

Products (2)

online_food_ordering_system_project/online_food_ordering_system 2.0

oretnom23/online_food_ordering_system 2.0

Published Jan 12, 2023

Tracked Since Feb 18, 2026