Description
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).
Unscored
CVE-2021-28294
EUVD-2021-14983GHSA-98m6-692f-9693
Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to r…
Published Mar 16, 2021 · Updated Aug 3, 2024 · Assigned by mitre