Vulnerability CVE-2023-1392


Published: 2023-03-14

Description:
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222979.

Type:

CWE-434

(Unrestricted Upload of File with Dangerous Type)

 References:
https://vuldb.com/?ctiid.222979
https://vuldb.com/?id.222979
https://github.com/Fchen-xcu/Vulnerability-Set/blob/main/The%20online%20pizza%20ordering%20system%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf

Copyright 2026, cxsecurity.com

 

Back to Top