High severity7.2NVD Advisory· Published Aug 31, 2022· Updated Jun 17, 2026
CVE-2022-36580
CVE-2022-36580
Description
An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file.
Affected products
4cpe:2.3:a:online_ordering_system_project:online_ordering_system:2.3.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:online_ordering_system_project:online_ordering_system:2.3.2:*:*:*:*:*:*:*
- (no CPE)range: <=2.3.2
- Online Ordering System/Online Ordering Systemdescription
- Range: <=2.3.2
Patches
Vulnerability mechanics
References
1- github.com/zerrr0/Zerrr0_Vulnerability/blob/main/Online-Ordering-System/Arbitrary-File-Upload-Vulnerability.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.