01001000entai/bug_report

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-43275 ↗	Oct 28, 2022Friday, 28 October 2022, 14:15	7.2 HIGH	—
Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-43276 ↗	Oct 28, 2022Friday, 28 October 2022, 14:15	7.2 HIGH	—
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelectedfood.php.