CyberRota Analysis
AI-GeneratedA vulnerability exists in the Online Medicine Delivery System 1.0, specifically within the doupdateimage function of the Customer Controller, allowing for unrestricted file uploads through manipulation of the 'photo' argument. This weakness can be exploited remotely, potentially leading to unauthorized access or execution of malicious code. Organizations using this system should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.php?action=photos of the component Customer Controller. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.