Cross-site Scripting (XSS)

Magmi is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary webscript through the profile parameter of web/magmi.php or through querystring to web/magmiimportrun.php...

Cross-Site Scripting (XSS) And Arbitrary Code Execution

dweeves/magmi-git is vulnerable to cross-site scripting XSS and arbitrary code execution attacks. The attacks are possible because user-supplied data prefix are being input to the magmi-git-master/magmi/web/ajaxgettime.php URL without enough filtering...

Magmi Cross-Site Scripting Vulnerability

Magmi is a set of import tools for importing product catalogs into the Magento system. A cross-site scripting vulnerability exists in Magmi version 0.7.22, which stems from the program failing to adequately filter user submissions to the magmi-git-master/magmi/web/ajaxgettime.php; URL. A remote...

CVE-2017-7391

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

CVE-2017-7391

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

Cross site scripting

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

CVE-2017-7391

The Magmi (Magento Mass Importer) database client, specifically version 0.7.22 , is vulnerable to a Cross-Site Scripting (XSS) flaw. The issue arises from insufficient filtration of the prefix parameter within the magmi-git-master/magmi/web/ajax_gettime.php URL. An attacker can exploit this to in...

CVE-2017-7391

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

EUVD-2022-5134

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

CVE-2017-7391: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data prefix passed to the 'magmi-git-master/magmi/web/ajaxgettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of...

Magento E-Commerce Platform Magmi Plugin Information Disclosure

An information disclosure vulnerability has been discovered in Magento e-commerce platform Magmi Plugin. Successful exploitation results in access to Magento site credentials and database encryption key...

Magmi (Magento Mass Importer) Detection (HTTP)

HTTP based detection of Magmi Magento Mass Importer. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

E-Commerce platform Magento plug-in is exposed 0day vulnerabilities-vulnerability warning-the black bar safety net

! Recently, the e-Commerce platform Magento, a very popular plug-in－Magmi is exposed out of the 0 day vulnerabilities, and there have been hackers use this vulnerability to attack. Magento is a professional open-source e-Commerce system. Magento design is very flexible, and also has a modular...

Magmi (Magento Mass Importer) <= 0.7.21 Local File Disclosure Vulnerability

Magmi Magento Mass Importer is prone to a local file disclosure vulnerability. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Magento Server MAGMI plugin cross-site scripting vulnerability

Magento is the United States Magento company's set of professional open source PHP e-commerce system , it provides rights management , search engine and payment gateway features such as Magento Server is the Magento server . MAGMI aka Magento Mass Importer is one of the product catalogs used to...

Magento Server MAGMI plugin directory traversal vulnerability

Magento is the United States Magento company's set of professional open source PHP e-commerce system , it provides rights management , search engine and payment gateway features such as Magento Server is the Magento server . MAGMI aka Magento Mass Importer is one of the product catalogs used to...

CVE-2015-2068

Multiple cross-site scripting XSS vulnerabilities in the MAGMI aka Magento Mass Importer plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php...

CVE-2015-2067

Directory traversal vulnerability in web/ajaxpluginconf.php in the MAGMI aka Magento Mass Importer plugin for Magento Server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in web/ajaxpluginconf.php in the MAGMI aka Magento Mass Importer plugin for Magento Server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the MAGMI aka Magento Mass Importer plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php...