NetSight
critical9.8

CVE-2023-30122

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitr…

Impact

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

VendorProductAffected versions
Oretnom23Online Food Ordering System
Version 2.0

Weakness classification

References