cvedb.io
CVE-2023-24646
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2023-02-13T21:15:14.370 · Last modified 2026-06-17T05:39:41.680

Summary

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

oretnom23 — online_food_ordering_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when oretnom23 ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.