CVE-2020-28138

概要

参考情報

• exploit-db.com/exploits/48429 · Exploit
• sourcecodester.com/php/14185/online-clothing-store.html · Vendor Advisory

online clothing store のその他の脆弱性

• CVE-2020-28140緊急 9.8SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.
• CVE-2020-28139中 6.1SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.