Lucene search
GoogleOSV:GHSA-X3GH-95P8-43QVHistoryMay 14, 2022 - 12:56 a.m.
MAGMI plugin for Magento Unsafe File Upload
2022-05-1400:56:27
Google
osv.dev
7
magento
vulnerability
file upload
EPSS
0.005
Percentile
75.9%
Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file, then accessing the PHP file via a direct request to it in magmi/plugins/.
Related
github
github
MAGMI plugin for Magento Unsafe File Upload
2022-05-14 00:56:27
cvelist
cvelist
CVE-2014-8770
2014-11-13 15:00:00
exploitdb
exploitdb
Magento Server MAGMI Plugin 0.7.17a - Remote File Inclusion
2014-10-25 00:00:00
nvd
nvd
CVE-2014-8770
2014-11-13 21:32:14
cve
cve
CVE-2014-8770
2014-11-13 21:32:14
openvas
openvas
prion
prion
Unrestricted file upload
2014-11-13 21:32:00