CVE-2021-36038

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability in the Multishipping Module. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure...

CVE-2021-36040

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to remote code execution...

Magento Commerce跨站脚本漏洞

Magento Commerce is to provide a first-class shopping experience without the need for developer support. Magento Commerce suffers from a cross-site scripting vulnerability that exists due to insufficient cleaning of user-supplied data. A remote attacker can exploit this vulnerability to inject an...

Magento Commerce 输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Commerce 和 Magento Open Source输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe.Adobe Magento is vulnerable to an input validation error. An attacker could exploit the vulnerability to cause a denial of service...

Magento Commerce 和 Magento Open Source 操作系统命令注入漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An operating system command injection vulnerability exists in...

Magento Commerce 和 Magento Open Source安全漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A security vulnerability exists in Magento Commerce and Magento Op...

Magento Commerce 命令注入漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Commerce 路径遍历漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A path traversal vulnerability exists in Magento Commerce due to an input validation error when processing a catalog traversal sequence. A remote administrator can send a specially crafted...

Magento Commerce安全漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A security vulnerability exists in Magento Commerce, which exists due to incorrect input validation when processing XML data. A remote administrator can pass specially crafted XML data to th...

Magento Commerce 和 Magento Open Source 访问控制错误漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support.Magento Open Source is to provide basic e-commerce functionality th...

Magento Commerce 和 Magento Open Source代码问题漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A code issue vulnerability exists in Magento Commerce and Magento...

Magento Commerce 和 Magento Open Source输入验证错误漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An input validation error vulnerability exists in Magento Commerce...

Magento Commerce输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker could exploit this vulnerability to bypass security features...

Magento Commerce 授权问题漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. Magento Commerce has an authorization issue vulnerability that exists due to insufficient authorization checks. A remote administrator can bypass implemented security restrictions and gain...

Magento Commerce 和 Magento Open Source 代码问题漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Commerce 输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Commerce输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker can exploit this vulnerability to elevate privileges...

Magento Open Source和Magento Commerce 输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Commerce 代码问题漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...