CVE-2026-127283SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload

Açıklama

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• VDB-436449 | SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload vdb-entrytechnical-description
• VDB-436449 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-127283 | CVE Analysis and Report third-party-advisory
• Submit #1041048 | SourceCodester Food Ordering System in PHP and MySQL 1.0 Unrestricted File Upload Leading to Remote Code Execution third-party-advisory
• https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/Food-Ordering-System/VULN-F1-Unauth… broken-linkexploit
• https://www.sourcecodester.com/ product