Online Clothing Store Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Online Clothing Store Project records in CISA KEV

No Online Clothing Store Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-17109 CVE-2020-28140 · GHSA-rhcr-gqff-r4v3

MEDIUM 46

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01863 Published 2020-11-17 No fix listed CWE-434

TI-2020-17107 CVE-2020-28138 · GHSA-xxqr-hj46-74ww

MEDIUM 46

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01981 Published 2020-11-17 No fix listed CWE-89

TI-2020-17108 CVE-2020-28139 · GHSA-2jg8-c8q8-842v

LOW 29

SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2020-11-17 No fix listed CWE-79