CVE-2023-2246

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=save_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227236.

• CWE-434
• CWE-434

• https://docs.google.com/document/d/1Bzt1UOXHJYyNFvTUsMO4zfbiDd_cKxuEygjAww2GcZQ/editExploit, Third Party Advisory
• https://vuldb.com/?ctiid.227236Third Party Advisory
• https://vuldb.com/?id.227236Third Party Advisory
• https://docs.google.com/document/d/1Bzt1UOXHJYyNFvTUsMO4zfbiDd_cKxuEygjAww2GcZQ/editExploit, Third Party Advisory
• https://vuldb.com/?ctiid.227236Third Party Advisory
• https://vuldb.com/?id.227236Third Party Advisory

Published

Apr 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22453Discourse is an option source discussion platform. Prior to …5.3
• CVE-2023-22454Discourse is an option source discussion platform. Prior to …6.1
• CVE-2023-22455Discourse is an option source discussion platform. Prior to …6.1
• CVE-2023-22456ViewVC, a browser interface for CVS and Subversion version c…6.1
• CVE-2023-22457CKEditor Integration UI adds support for editing wiki pages …8.8
• CVE-2023-22458Redis is an in-memory database that persists on disk. Authen…5.5
• CVE-2023-22460go-ipld-prime is an implementation of the InterPlanetary Lin…7.5
• CVE-2023-22461The `sanitize-svg` package, a small SVG sanitizer to prevent…6.1
• CVE-2023-22462Grafana is an open-source platform for monitoring and observ…5.4
• CVE-2023-22463KubePi is a k8s panel. The jwt authentication function of Ku…9.8
• CVE-2023-22464ViewVC is a browser interface for CVS and Subversion version…5.4
• CVE-2023-22465Http4s is a Scala interface for HTTP services. Starting with…5.3