CRITICAL🇵🇱 Wersja polska

CVE-2023-30122

CVSS 9.8v3.1pub. 2023-05-05upd. 2026-03-30

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oretnom23 Online Food Ordering System

    APP
    Oretnom23
    2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-30533CRITICAL9.8PL ✓same product

SQL Injection w Online Food Ordering System przez parametr 'id'

CVE-2026-30530CRITICAL9.8PL ✓same product

SQL Injection w Online Food Ordering System — parametr username

CVE-2026-30532CRITICAL9.8PL ✓same product

SQL Injection w SourceCodester Online Food Ordering System via parametr 'id'

CVE-2023-24646CRITICAL9.8PL ✓same product

RCE przez dowolny upload pliku w Food Ordering System v2.0

CVE-2020-29297CRITICAL9.8PL ✓same product

Wielokrotne SQL Injection w Online Food Ordering System 1.0