Magento Arbitrary Code Execution Vulnerability (CNVD-2020-32364)

Magento is an open source e-commerce platform written in PHP under Adobe.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition, later...

Magento Authorization Bypass Vulnerability

Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engines and payment gateways , etc. Magento Commerce is the commercial version of Magento . There is a security vulnerability in Adobe...

Magento Cross-Site Scripting Vulnerability (CNVD-2020-32308)

Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engines and payment gateways , etc. Magento Commerce is the commercial version of Magento . A cross-site scripting vulnerability exists i...

Critical Security Patches Released for Magento, Adobe Illustrator and Bridge

It's not 'Patch Tuesday,' but software giant Adobe today released emergency updates for three of its widely used products that patch dozens of newly discovered critical vulnerabilities. The list of affected software includes Adobe Illustrator, Adobe Bridge, and Magento e-commerce platform,...

Critical Security Patches Released for Magento, Adobe Illustrator and Bridge

It's not 'Patch Tuesday,' but software giant Adobe today released emergency updates for three of its widely used products that patch dozens of newly discovered critical vulnerabilities. The list of affected software includes Adobe Illustrator, Adobe Bridge, and Magento e-commerce platform,...

Critical Adobe Illustrator, Bridge and Magento Flaws Patched

Adobe is warning of critical flaws in Adobe Bridge, Adobe Illustrator and the Magento e-commerce platform. If exploited, the most severe vulnerabilities could enable remote code execution on affected systems. Adobe’s out-of-band security update, released on Tuesday, addressed vulnerabilities tied...

itti.com.np Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1151681 Security Researcher Manojkhd Helped patch 44 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting itti.com.np website and its users. Following coordinate...

PT-2020-6325 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to incorrect code generation management in the Magento platfor...

PT-2020-6324 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to incorrect code generation management in the Magento Commerc...

APSB20-22 Security updates available for Magento

Magento has released updates for Magento Commerce and Open Source editions. These updates resolve vulnerabilities rated Critical, Important and Moderate severity ratings. Successful exploitation could lead to arbitrary code execution...

PT-2020-6290 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento version 1.14.4.4 and earlier Magento version 1.9.4.4 and earlier Description: The issue is related to a command injection vulnerability. It could allow a remote...

PT-2020-6278 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to an authorization bypass, which could allow a remote attacke...

PT-2020-6323 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to a command injection vulnerability. Successful exploitation...

PT-2020-6329 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to a lack of data sanitization at the administrative level,...

PT-2020-6328 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento version 1.14.4.4 and earlier Magento version 1.9.4.4 and earlier Description: The issue is related to insufficient access control, which could allow a remote...

PT-2020-6327 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to incorrect code generation management in the Magento Commerc...

PT-2020-6380 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to an observable timing discrepancy, which could allow a remot...

ubuy.qa Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1142900 Security Researcher Manojkhd Helped patch 43 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ubuy.qa website and its users. Following coordinated an...

letstango.com Cross Site Request Forgery vulnerability

Open Bug Bounty ID: OBB-1133275 Security Researcher Manojkhd Helped patch 43 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting letstango.com website and its users. Following...

Magento Directory Listing

The scanner has detected publicly accessible directory listings on the Magento web application. This may expose sensitive information to an attacker which may allow for further exploitation techniques to be leveraged, possibly leading to sensitive information leakage or a compromise of the target...