Remote Code Execution Vulnerability in Sourcecodester Online Food Ordering System
CVE-2021-41644
9.8CRITICAL
Key Information:
- Vendor
- CVE Published:
- 29 October 2021
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-41644?
A vulnerability presents itself in the online food ordering platform developed by Sourcecodester, allowing attackers to execute remote code through a specially crafted PHP file. This bypasses existing image upload filters, potentially compromising the integrity and confidentiality of the system. Appropriate security measures should be implemented to mitigate the risk associated with this weakness.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.