PT-2024-39095 · Unknown · Sourcecodester Food Ordering Management System
Niu-Zida
·
Published
2024-09-07
·
Updated
2024-09-10
·
CVE-2024-8558
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
SourceCodester Food Ordering Management System version 1.0
Description:
A problematic vulnerability was found in the SourceCodester Food Ordering Management System. This issue affects the Price Handler component, specifically the file /foms/routers/place-order.php. The manipulation of the
total argument leads to improper validation of the specified quantity in input. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Recommendations:
For SourceCodester Food Ordering Management System version 1.0, consider disabling the Price Handler component or restricting access to the /foms/routers/place-order.php file until a patch is available. As a temporary workaround, avoid using the
total argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Food Ordering Management System