CVE-2021-28294

Publication date

2021-03-16 19:54:20

Family

mitre

State

PUBLISHED

Description

Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE).