Threats tagged 'ghsa-p4vm-43g4-5hh7'

SourceCodester Online Food Ordering System 1.0 contains a path traversal vulnerability in the unlink function of admin/delete.php. This flaw allows remote attackers to manipulate the image_name argument to delete arbitrary files. Public exploit code is available, and the vulnerability has a medium severity rating with a CVSS score of 6.5.