Lucene search
+L

Magento-CVE-2016-4010

🗓️ 25 Aug 2026 20:52:43Reported by KitPloitType 
kitploit
 kitploit
🔗 kitploit.com👁 1 Views

Unauthenticated RCE in Magento below 2.0.6 via web API anonymous permission executing arbitrary PHP.

Related
ReporterTitlePublishedViews
Family
zdt
zdt
Magento < 2.0.6 - Unauthenticated Arbitrary Unserialize -> Arbitrary Write File
18 May 201600:00
zdt
circl
Circl
CVE-2016-4010
18 May 201600:00
circl
cnvd
CNVD
Magento Arbitrary File Write Vulnerability
19 May 201600:00
cnvd
checkpoint_advisories
Check Point Advisories
Magento API unserialize Remote Code Execution (CVE-2016-4010)
29 May 201600:00
checkpoint_advisories
cve
CVE
CVE-2016-4010
23 Jan 201721:00
cve
cvelist
Cvelist
CVE-2016-4010
23 Jan 201721:00
cvelist
exploitdb
Exploit DB
Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File
18 May 201600:00
exploitdb
exploitpack
exploitpack
Magento 2.0.6 - Arbitrary Unserialize Arbitrary Write File
18 May 201600:00
exploitpack
kitploit
Kitploit
CVE-2016-4010
25 Aug 202604:25
kitploit
canvas
canvas
Immunity Canvas: MAGENTO_SET_PAYMENT_INFO
23 Jan 201721:59
canvas
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2026 20:52Current
10High risk
Vulners AI Score10
CVSS 27.5
CVSS 39.8
EPSS0.92869
1