CVE-2024-13067

MEDIUM 5.3CVE-2024-13067 · Published 31/12/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
online food ordering system codeastro	`= 1.0`	No fix yet

Description

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/all_users.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References

codeastro.com · Product
shaturo1337/POCs · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free