CVE-2020-28139

概要

参考情報

• exploit-db.com/exploits/48426 · Exploit
• sourcecodester.com/php/14185/online-clothing-store.html · Vendor Advisory

online clothing store のその他の脆弱性

• CVE-2020-28140緊急 9.8SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.
• CVE-2020-28138緊急 9.8SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.