CVE-2024-8558

MEDIUM

SourceCodester Food Ordering Management System 1.0 - Info Disclosure

Title source: llm

Description

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of specified quantity in input. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

References (5)

[Permissions Required, Third Party Advisory, VDB Entry] https://vuldb.com/?id.276778

[Permissions Required, Third Party Advisory, VDB Entry] https://vuldb.com/?ctiid.276778

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.403345

[Exploit, Third Party Advisory] https://github.com/Niu-zida/cve/blob/main/Payment%20loopholes.md

View Exploit ZIP pw:eip

[Product] https://www.sourcecodester.com/

Scores

CVSS v3 4.3

EPSS 0.0014

EPSS Percentile 34.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-1284

Status published

Products (1)

oretnom23/food_ordering_management_system 1.0

Published Sep 07, 2024

Tracked Since Feb 18, 2026