4300 matches found
Keeper Threat Group Rakes in $7M from Hundreds of Compromised E-Commerce Sites
Since its launch three years ago, the Keeper threat group has compromised more than 570 e-commerce websites, from online liquor stores to Apple product resellers. And experts warn of future, increasingly sophisticated attacks against online merchants worldwide. The Keeper group, a faction of the...
Magmi (Magento Mass Importer) <= 0.7.17a Unrestricted File Upload Vulnerability
Magmi is prone to an unrestricted file upload vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Magmi (Magento Mass Importer) < 0.7.24 Remote Authentication Bypass Vulnerability
Magmi is prone to a remote authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
Magmi (Magento Mass Importer) <= 0.7.24 CSRF Vulnerability
Magmi is prone to a cross-site request forgery CSRF vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Magmi (Magento Mass Importer) < 0.7.23 XSS Vulnerability
Magmi is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Adobe Magento Form Builder Cross-Site Scripting Vulnerability
Adobe Magento is the United States Odo than Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways and other features . Form Builder is used in which a form to build extensions . Adobe Magento in the Form Builder...
Magento Unsupported Version
The installation of Magento detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. No source data...
Adobe Magento WebForms Pro M2 Cross-Site Scripting Vulnerability
Adobe Magento is the United States Odo than Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways , etc. WebForms Pro M2 is used in which a form to build extensions . Adobe Magento 2 in the WebForms Pro M2 version...
Tuesday’s Magento 1 EOL Leaves Clock Ticking on 100K Online Stores
With Magento 1 reaching end-of-life EOL on Tuesday, Adobe is making a last-ditch effort to urge the 100,000 online stores still running the outdated version to migrate to Magento 2. Magento is a popular, Adobe-owned open-source e-commerce platform that powers many online shops. After June 30...
CVE-2020-13423
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
CVE-2020-12635
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
CVE-2020-13423
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
CVE-2020-12635
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
Cross site scripting
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
Cross site scripting
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
CVE-2020-13423
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
CVE-2020-13423
CVE-2020-13423 concerns a cross-site scripting vulnerability in Form Builder 2.1.0 for Magento. The connected documents confirm that the issue enables XSS against Magento 2 admin accounts via input channels including the Current_url field, the email field, and the User-Agent HTTP header. The root...
CVE-2020-12635
WebForms Pro M2 extension for Magento 2 is affected by a cross-site scripting (XSS) vulnerability via the textarea field in versions prior to 2.9.17. Root cause reports indicate insufficient input validation on the client side. Impact is client-side code execution; exploit details are not provide...
