critical9.8
CVE-2021-28294
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution…
Impact
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Ordering System Project | Online Ordering System | Version 1.0 |