Ebay Magento Bug Bounty #10 - Persistent Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 10 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1457 eBay Inc. Bug Bounty Program ID: EIBBP-31603 Video: https://www.youtube.com/watch?v=WffsHd8pibE Release Date:...

Ebay Magento Bug Bounty #12 - CSRF MSG Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 12 - CSRF MSG Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video: https://www.youtube.com/watch?v=x7uaABfxxU0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1460 EIBBP-31602...

Ebay Magento Bug Bounty #17 - CS Cross Site Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 17 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1473 EIBBP-31541 Release Date: ============= 2015-06-14 Vulnerability Laboratory ID VL-ID:...

Ebay Magento Bug Bounty #6 - Persistent Mail Web Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 6 - Persistent Mail Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1393 EIBBP-31097 Release Date: ============= 2015-06-02 Vulnerability Laboratory ID VL-ID:...

Ebay Magento Bug Bounty #6 - Persistent Mail Web Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 6 - Persistent Mail Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1393 EIBBP-31097 Release Date: ============= 2015-06-01 Vulnerability Laboratory ID VL-ID:...

CVE-2012-3243

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2012-3243

The CVE-2012-3243 entry concerns a Cross-site Scripting (XSS) vulnerability in the SEOgento plugin for Magento, where an attacker can inject arbitrary script/HTML through the id parameter. The affected component is the SEOgento plugin for Magento; the root cause is an XSS flaw that enables script...

CVE-2012-3243

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Magento 1.9.1 /index.php/admin/Cms_Wysiwyg/ SQL注入漏洞

No description provided by source...

Magento XML-RPC XXE Arbitrary File Disclosure

The Magento application running on the remote web server is affected by an XML external entity injection XXE vulnerability due to improper parsing of XML data in the ZendXmlRpcServer class. A remote, unauthenticated attacker can exploit this vulnerability to view arbitrary files on the remote hos...

Magento Detection

Binary data magentodetect.nbin...

Magento Mage_Adminhtml_Block_Report_Search_Grid Class 'popularity' Parameter SQLi

The Magento application running on the remote web server is affected by a SQL injection vulnerability due to failing to properly sanitized the user-supplied range inputs to the 'popularity' parameter of the MageAdminhtmlBlockReportSearchGrid class. An unauthenticated, remote attacker can exploit...

Magento Community Edition and Enterprise Edition PHP Remote File Inclusion Vulnerability

Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A PHP remote fi...

Magento Community Edition and Enterprise Edition Directory Traversal Vulnerability

Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A directory...

Magento Community Edition and Enterprise Edition Authentication Bypass Vulnerability

Magento is a professional open-source PHP e-commerce system from Magento, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A security vulnerability exists in Magent...

Vulnerabilities in Magento Community Edition and Enterprise Edition

Magento is a professional open-source PHP e-commerce system from Magento, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A security vulnerability exists in the...

Magento Community Edition and Enterprise Edition SQL Injection Vulnerabilities

Magento is a professional open-source PHP e-commerce system from Magento, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A SQL injection vulnerability exists in t...

CVE-2015-3458

The fetchView function in the MageCoreBlockTemplateZend class in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 does not restrict the stream wrapper used in a template path, which allows remote administrators to include and execute arbitrary PHP files via the phar:// stre...

CVE-2015-3457

Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter...