Online Clothing Store Project Online Clothing Store
3 CVEs affecting Online Clothing Store Project Online Clothing Store. Latest disclosed: 2020-11-17. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28140 | Critical | 9.8 | 2020-11-17 | SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php. |
CVE-2020-28138 | Critical | 9.8 | 2020-11-17 | SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php. |
CVE-2020-28139 | Medium | 6.1 | 2020-11-17 | SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php. |