A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/product/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-267414 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.267414 | Third Party Advisory |
| https://vuldb.com/?ctiid.267414 | Permissions Required Third Party Advisory |
| https://vuldb.com/?submit.351827 | Third Party Advisory |
| https://github.com/L1OudFd8cl09/CVE/blob/main/07_06_2024_a.md | Exploit |
Configurations
Configuration 1 (hide)
|
History
06 Aug 2024, 14:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?id.267414 - Third Party Advisory | |
| References | () https://github.com/L1OudFd8cl09/CVE/blob/main/07_06_2024_a.md - Exploit | |
| References | () https://vuldb.com/?ctiid.267414 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?submit.351827 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:bakery_online_ordering_system_project:bakery_online_ordering_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Bakery Online Ordering System Project
Bakery Online Ordering System Project bakery Online Ordering System |
07 Jun 2024, 19:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-07 18:15
Updated : 2024-08-06 14:37
NVD link : CVE-2024-5745
Mitre link : CVE-2024-5745
JSON object : View
Products Affected
bakery_online_ordering_system_project
- bakery_online_ordering_system
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type