CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

CVE-2026-19903

Technical details about CVE-2026-19903 (affected product, components, versions, exploit vectors, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-19903: Files or Directories Accessible to External Parties

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

CVE-2026-19229

A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can lead to file and directory information exposure. The attack can be launched...

CVE-2026-19229: Insertion of Sensitive Information into Externally-Accessible File or Directory

A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file /notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can lead to file and directory information exposure. The attack can be launched...

PT-2026-69086

A vulnerability was determined in SourceCodester Online Clothing Store. Affected by this issue is some unknown functionality of the file / notes/ of the component Dreamweaver Metadata Files. Executing a manipulation can lead to file and directory information exposure. The attack can be launched...

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

Sql injection

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

Cross site scripting

SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting XSS vulnerability via a Offer Detail field in offer.php...

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

CVE-2020-28140: Unrestricted Upload of File with Dangerous Type

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php...

CVE-2020-28139: Improper Neutralization of Input During Web Page Generation

SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting XSS vulnerability via a Offer Detail field in offer.php...

SourceCodester Online Clothing Store 代码问题漏洞

SourceCodester Online Clothing Store is a website builder system from SourceCodester, Inc. that provides online clothing store functionality. A security vulnerability exists in SourceCodester Online Clothing Store version 1.0, which is caused by an arbitrary file upload in the image upload functi...

PT-2020-16934

Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the Offer Detail field in the offer.php file. Recommendations For...

PT-2020-16935

Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description The issue concerns an arbitrary file upload via the image upload feature of Products.php. This allows for potential malicious file uploads. Recommendations For SourceCodester Online...

PT-2020-16933

Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description The issue is related to a SQL Injection vulnerability. It occurs via the txtUserName parameter to the "login.php" endpoint. Recommendations For SourceCodester Online Clothing Store...

CVE-2020-28138: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...