CVE-2022-36580

Published: 2022-08-31T20:15Z

Last Modified: 2024-11-21T07:13Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt