Vulnerabilities

TI-2020-17109 CVE-2020-28140 · GHSA-rhcr-gqff-r4v3

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the…

MEDIUM 46

SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01863 Published 2020-11-17 No fix listed CWE-434

TI-2020-17108 CVE-2020-28139 · GHSA-2jg8-c8q8-842v

LOW 29

SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2020-11-17 No fix listed CWE-79

TI-2020-17107 CVE-2020-28138 · GHSA-xxqr-hj46-74ww

MEDIUM 46

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01981 Published 2020-11-17 No fix listed CWE-89