CVE-2024-7189mediumCWE-434

CVE-2024-7189: medium-severity vulnerability in itsourcecode Online Food Ordering System

itsourcecode Online Food Ordering System editproduct.php unrestricted upload

Published · Updated

Follow this CVE+ Monitor Online Food Ordering System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%
A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272610 is the identifier assigned to this vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
itsourcecode · Online Food Ordering System
Related CVEs — itsourcecode Online Food Ordering System

In the same product, most dangerous first.

CVE-2024-6373MEDIUMitsourcecode Online Food Ordering System addproduct.php unrestricted uploadEPSS 0.9%CVE-2024-6253MEDIUMitsourcecode Online Food Ordering System purchase.php sql injectionEPSS 0.6%CVE-2024-7838MEDIUMitsourcecode Online Food Ordering System addcategory.php sql injectionEPSS 0.6%