cvedb.io
CVE-2023-30122
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2023-05-05T02:15:08.753 · Last modified 2026-06-17T05:54:11.870

Summary

An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

oretnom23 — online_food_ordering_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when oretnom23 ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.