Lucene search

K

Online Clothing Store Project Security Vulnerabilities

cve
cve

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.

9.8CVSS

9.8AI Score

0.005EPSS

2020-11-17 07:15 PM
34
cve
cve

CVE-2020-28139

SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.

6.1CVSS

5.9AI Score

0.002EPSS

2020-11-17 07:15 PM
32
cve
cve

CVE-2020-28140

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.

9.8CVSS

9.5AI Score

0.106EPSS

2020-11-17 07:15 PM
27