CVE-2023-2246 is a critical unrestricted file upload vulnerability affecting SourceCodester Online Pizza Ordering System 1.0, specifically within the admin/ajax.php?action=save_settings file when handling the 'img' argument. This vulnerability allows an unauthenticated attacker to remotely upload arbitrary files, potentially leading to full system compromise. With a CVSS score of 9.8 (Critical), the attack requires no user interaction or special privileges, making it easily exploitable. Public exploit code is available via ExploitDB (EDB-51431), though there is currently minimal community discussion or media coverage, and it is not listed on CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:online_pizza_ordering_system_project:online_pizza_ordering_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.