Vulnerabilities (CVE)

Filtered by vendor Online Clothing Store Project Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-28140 1 Online Clothing Store Project 1 Online Clothing Store 2024-11-21 7.5 HIGH 9.8 CRITICAL
SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.
CVE-2020-28139 1 Online Clothing Store Project 1 Online Clothing Store 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.
CVE-2020-28138 1 Online Clothing Store Project 1 Online Clothing Store 2024-11-21 7.5 HIGH 9.8 CRITICAL
SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.