CVE-2023-2246

MEDIUM

SourceCodester Online Pizza Ordering System unrestricted upload

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-2246 has a selected CVSS score of 6.3 (medium); EIP currently links 1 catalogued exploit.

Description

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227236.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 22, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Online Pizza Ordering System

Browse SourceCodester / Online Pizza Ordering System
CVE List1.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBOnline Pizza Ordering System v1.0 - Unauthenticated File UploadExploitDB exploitby URGANNot analyzed1 file
ExploitDB
PoC details

References

5