Magento RSS Feed Brute Force

Magento authenticated RSS Feed has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No...

Magecart Hits 80 Major eCommerce Sites in Card-Skimming Bonanza

UPDATE More than 80 global eCommerce sites have been uncovered that were actively compromised by Magecart groups. Magecart, a loose affiliation of attack groups responsible for the payment-card attacks on Ticketmaster, Forbes, British Airways, Newegg and others, typically insert virtual credit-ca...

Remote Code Execution (RCE)

magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as a user with admin privileges to layouts can execute code through a XML layout update...

Session Fixation

magento/community-edition is vulnerable to session fixation. The vulnerability exists as there was inadequate session validation handling...

Authorization Bypass

magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially confidental information...

SQL Injection

magento/community-edition is vulnerable to SQL injection. The vulnerability exists as a user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications...

Authorization Bypass

magento/community-edition is vulnerablbe to authorization bypass. The vulnerability exists through an Insecure Direct Object Reference IDOR that could allow unauthorized access to order details...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as a user with privileges to customer configurations to inject malicious javascript...

Information Disclosure

magento/community-edition is vulnerable to information disclosure. The vulnerability exists as the samples of disabled downloadable products are accessible due to the lack of user input sanitization...

Remote Code Execution (RCE)

magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as a user with admin privileges to email templates can execute arbitrary code by previewing a malicious template...

Authorization Bypass

magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a low-privileged user to make unauthorized environment configuration changes...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as users with privileges to email templates can cause XSS attacks...

Server-side Request Forgery (SSRF)

magento/community-edition is vulnerable to server-side request forgery SSRF. The vulnerability exists as a user with access to the admin panel can manipulate system configuration and execute arbitrary code...

Arbitrary File Upload

magento/community-edition is vulnerable to arbitrary file upload. The vulnerability exists as a file upload filter bypass exists that allows users with admin privileges to edit configuration keys to remove file extension filters, potentially resulting in the malicious upload and execution of...

Remote Code Execution (RCE)

magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as users with admin privileges to create sitemaps can execute arbitrary PHP code by creating a malicious sitemap file...

Cross Site Request Forgery (CSRF)

magento/community-edition is vulnerable to cross-site request forgery CSRF. The vulnerability exists through the GiftCardAccount removal feature...

Denial Of Service (DoS)

magento/community-edition is vulnerable to denial of service DoS. The vulnerability exists due to the lack of brute-forcing defenses in the token exchange protocol...

Information Disclosure

magento/community-edition is vulnerable to information disclosure. The vulnerability exists as an admin is able to view metadata of a trusted device that is used by another admin...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists as an admin with import feature privileges can make modifications to a configuration file that allows unauthorized removal of file upload restrictions, causing arbitrary code execution...

Remote Code Execution (RCE)

magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as an admin, who is able to create or edit a product, is able to upload RCE payloads through XML layout updates...