critical9.8
CVE-2021-25211
Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\p…
Impact
Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Ordering System Project | Online Ordering System | Version 1.0 |