CVE-2020-28140

概要

参考情報

• exploit-db.com/exploits/48438 · Exploit
• sourcecodester.com/php/14185/online-clothing-store.html · Vendor Advisory

online clothing store のその他の脆弱性

• CVE-2020-28139中 6.1SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.
• CVE-2020-28138緊急 9.8SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.