Adobe Magento Commerce and Magento Open Source Path Traversal Vulnerability

Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commerci...

Adobe Magento Commerce and Magento Open Source Cross-Site Scripting Vulnerability

Adobe Magento is the U.S. Odobie Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commercial version of Magento....

PT-2020-5104 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.5-p1 and earlier Description: The issue is related to an observable timing discrepancy, which could lead to a signature verification bypass. This vulnerability is associated with information disclosure through a...

PT-2020-5111 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.5-p1 and earlier Description: The issue is related to a path traversal vulnerability due to incorrect restriction of a directory path with limited access. Successful exploitation could lead to arbitrary code execution. Th...

APSB20-47 Security updates available for Magento

Magento has released updates for Magento Commerce 2 formerly known as Magento Enterprise Edition and Magento Open Source 2 formerly known as Magento Community Edition. These updates resolve vulnerabilities rated Important and Critical . Successful exploitation could lead to arbitrary code executi...

PT-2020-5059 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.5-p1 and earlier Description: The issue is related to the lack of protection of the web page structure in Magento Commerce, a platform for developing and managing online stores. This could allow a remote attacker to execu...

PT-2020-5060 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.5-p1 and earlier Description: The issue is related to a security mitigation bypass vulnerability in the authorization mechanism of the Magento platform. Successful exploitation could lead to arbitrary code execution,...

Magento End of Life (EOL) Detection

The Magento version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-9665

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9665

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9664

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9664

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution...

Design/Logic Flaw

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution...

Cross site scripting

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

EUVD-2022-2092

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9664

CVE-2020-9664 affects Magento Open Source 1.x and Commerce 1.x, with versions 1.14.4.5 and earlier and 1.9.4.5 and earlier vulnerable to PHP object injection that could lead to arbitrary code execution. Multiple sources (NVD, Red Hat, GHSA advisories, OSV, CNVD, and OpenVAS) corroborate the issue...

CVE-2020-9664

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9665

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9665

CVE-2020-9665 relates to a stored cross-site scripting vulnerability in Magento Open Source and Commerce. Affected are Magento Open Source 1.9.4.5 and earlier and Magento Commerce 1.14.4.5 and earlier. The issue allows an attacker to disclose sensitive information via stored XSS in the Magento st...

Magento Unsupported Version Detection

According to its version, the installation of Magento on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Networ...