CVE-2023-0257
Description
A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fos/admin/index.php?page=menu of the component Menu Form. The manipulation of the argument Image with the input <?php system($_GET['c']); ?> leads to unrestricted upload. The attack can be launched remotely. The identifier VDB-218185 was assigned to this vulnerability.
- CVSS Version 3.1
- CVSS Version 3.0
- CVSS Version 2.0
nvd
CVE ID: CVE-2023-0257
Base Score: 9.8
Base Severity: CRITICAL
Vector String:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 3.9
vuldb
CVE ID: CVE-2023-0257
Base Score: 4.7
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Impact Score: 3.4
Exploitability Score: 1.2
vuldb
CVE ID: CVE-2023-0257
Base Score: 4.7
Base Severity: MEDIUM
Vector String:CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
vuldb
CVE ID: CVE-2023-0257
Base Score: 5.8
Base Severity: MEDIUM
Vector String:AV:N/AC:L/Au:M/C:P/I:P/A:P