CVE-2020-28138

Description

References

• exploit-db.com/exploits/48429 · Exploit
• sourcecodester.com/php/14185/online-clothing-store.html · Vendor Advisory

online clothing store의 다른 취약점

• CVE-2020-28140심각 9.8SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.
• CVE-2020-28139보통 6.1SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.