File Deletion Vulnerability in Fast Food Ordering System by orentnom23
CVE-2022-32328

9.1CRITICAL

Key Information:

Vendor: Fast Food Ordering System Project
Status: Fast Food Ordering System
Vendor: CVE Published:; 14 June 2022

🔔 Create Fast Food Ordering System Project Vulnerability Alert

What is CVE-2022-32328?

The Fast Food Ordering System v1.0 contains a vulnerability that allows an attacker to delete arbitrary files through a targeted request to the delete_img function in Master.php. Exploiting this flaw can permit unauthorized access to sensitive data, posing a significant risk to the integrity and availability of the system's files. It is crucial for users of this software to implement proper security measures to mitigate the potential impact of this vulnerability.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...

x_refsource_MISC

CVSS V3.1

Score:

9.1

Severity:

CRITICAL

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 14, 2022
Vulnerability Reserved
Jun 5, 2022

CVE-2022-32328 Data

JSON