Magento Code Execution Vulnerability (CNVD-2019-40831)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute arbitrary code via the email template hierarchy...

Magento cross-site scripting vulnerability (CNVD-2019-40741)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side code...

Magento cross-site scripting vulnerability (CNVD-2019-40742)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento Security Bypass Vulnerability (CNVD-2019-40829)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A security bypass vulnerability exists in Magento. An attacker can exploit this vulnerability to bypass the email confirmation mechanism via a GET request capturing the relevant account data obtained from the POST...

Magento Insecure Authentication and Session Management Vulnerability

Magento is an open source PHP e-commerce system from the U.S. company Magento. An insecure authentication and session management vulnerability exists in Magento. An attacker can exploit this vulnerability to gain access to the customer account index page via the guest session ID value after a...

Magento Code Execution Vulnerability (CNVD-2019-40830)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute arbitrary code using plugin functionality related to email templates...

Magento Remote Code Execution Vulnerability (CNVD-2019-40724)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to achieve remote code execution...

Magento Remote Code Execution Vulnerability (CNVD-2019-40726)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to achieve remote code execution...

Magento Remote Code Execution Vulnerability (CNVD-2019-40725)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to achieve remote code execution via a specially crafted custom layout update and import product functionality...

Magento XML Entity Injection Vulnerability

Magento is an open source PHP e-commerce system from the U.S. company Magento. Magento has an XML entity injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Magento cross-site scripting vulnerability (CNVD-2019-40739)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento cross-site scripting vulnerability (CNVD-2019-40740)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento SQL Injection Vulnerability (CNVD-2019-40754)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a SQL injection vulnerability. An attacker can exploit this vulnerability to execute illegal SQL...

Magento SQL Injection Vulnerability (CNVD-2019-40751)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a SQL injection vulnerability. An attacker can exploit this vulnerability to execute illegal SQL...

Magento cross-site scripting vulnerability (CNVD-2019-40738)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento Remote Code Execution Vulnerability (CNVD-2019-40733)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Authorization Issues Vulnerability (CNVD-2019-40734)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . Magento has an authorization problem vulnerability. An unauthenticated attacker can exploit this vulnerability t...

Magento Remote Code Execution Vulnerability (CNVD-2019-40729)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Remote Code Execution Vulnerability (CNVD-2019-40728)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute co...

Magento cross-site scripting vulnerability (CNVD-2019-40736)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A cross-site scripting vulnerability exists in Magento. An attacker can exploit this vulnerability to inject malicious JavaScript into the management console cache...