4490 matches found
Magento Bug Bounty - Cross Site Cross Site Vulnerability
Document Title: =============== Magento Bug Bounty - Cross Site Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1642 Video: https://www.youtube.com/watch?v=VDXeLSmgxIQ APPSEC-1126 Release Date: ============= 2015-11-11 Vulnerability Laboratory I...
Magento Bug Bounty #24 - Multiple CSRF Web Vulnerabilities
Document Title: =============== Magento Bug Bounty 24 - Multiple CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1643 APPSEC-1122 Video: http://www.vulnerability-lab.com/getcontent.php?id=1642 Release Date: ============= 2015-11-...
Magento Bug Bounty #24 - Multiple CSRF Web Vulnerabilities
Document Title: =============== Magento Bug Bounty 24 - Multiple CSRF Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1643 APPSEC-1122 Video: http://www.vulnerability-lab.com/getcontent.php?id=1642 Release Date: ============= 2015-11-...
eBay Magento CE 1.9.2.1 - Unrestricted Cron Script (Code Execution Denial of Service)
eBay Magento CE 1.9.2.1 - Unrestricted Cron Script Code Execution Denial of Service Exploit Title: eBay Magento CE = 1.9.2.1 Unrestricted Cron Script Potential Code Execution / DoS Date: 06.11.2015 Exploit Author: Dawid Golunski Vendor Homepage: http://magento.com Version: eBay Magento CE = 1.9.2...
eBay Magento CE 1.9.2.1 - Unrestricted Cron Script (Code Execution / Denial of Service)
Exploit Title: eBay Magento CE = 1.9.2.1 Unrestricted Cron Script Potential Code Execution / DoS Date: 06.11.2015 Exploit Author: Dawid Golunski Vendor Homepage: http://magento.com Version: eBay Magento CE = 1.9.2.1 / Magento EE =1.14.2.1 Tested on: Linux Magento reference ID: APPSEC-1045...
Magento Bug Bounty #22 - (Profile) Persistent Vulnerability
Document Title: =============== Magento Bug Bounty 22 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1636 Magento Security ID: APPSEC-1121 Release Date: ============= 2015-11-06 Vulnerability Laboratory ID VL-ID:...
Magento Bug Bounty #22 - (Profile) Persistent Vulnerability
Document Title: =============== Magento Bug Bounty 22 - Profile Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1636 Magento Security ID: APPSEC-1121 Release Date: ============= 2015-11-06 Vulnerability Laboratory ID VL-ID:...
Magento MAGMI plugin directory traversal vulnerability
Magento is a professional open source PHP e-commerce system, MAGMI is one of the plug-ins used to import a large number of product catalogs into the Magento system. A directory traversal vulnerability in the Magento MAGMI plugin allows remote attackers to send requests containing special director...
eBay Magento <= 1.9.2.1 - PHP FPM XML eXternal Entity Injection Vulnerability
Exploit for php platform in category web applications ============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY...
eBay Magento XXE Injection
============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY ------------------------- eBay Magento CE = 1.9.2.1 XML eXternal Entit...
eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection
============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY ------------------------- eBay Magento CE = 1.9.2.1 XML eXternal Entit...
eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection
eBay Magento 1.9.2.1 - PHP FPM XML eXternal Entity Injection ============================================= - Release date: 29.10.2015 - Discovered by: Dawid Golunski - Severity: High/Critical - eBay Magento ref.: APPSEC-1045 ============================================= I. VULNERABILITY...
[KIS-2015-04] Magento <= 1.9.2 (catalogProductCreate) Autoloaded File Inclusion Vulnerability
------------------------------------------------------------------------------- Magento = 1.9.2 catalogProductCreate Autoloaded File Inclusion Vulnerability ------------------------------------------------------------------------------- - Software Link: http://magento.com/ - Affected Versions:...
Magento E-Commerce Platform Magmi Plugin Information Disclosure
An information disclosure vulnerability has been discovered in Magento e-commerce platform Magmi Plugin. Successful exploitation results in access to Magento site credentials and database encryption key...
FreeBSD : magento -- multiple vulnerabilities (ea1d2530-72ce-11e5-a2a1-002590263bf5)
Magento, Inc. reports : SUPEE-6482 - This patch addresses two issues related to APIs and two cross-site scripting risks. SUPEE-6285 - This patch provides protection against several types of security-related issues, including information leaks, request forgeries, and cross-site scripting. SUPEE-59...
Magmi (Magento Mass Importer) Detection (HTTP)
HTTP based detection of Magmi Magento Mass Importer. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
E-Commerce platform Magento plug-in is exposed 0day vulnerabilities-vulnerability warning-the black bar safety net
! Recently, the e-Commerce platform Magento, a very popular plug-in－Magmi is exposed out of the 0 day vulnerabilities, and there have been hackers use this vulnerability to attack. Magento is a professional open-source e-Commerce system. Magento design is very flexible, and also has a modular...
Magmi Magento Zero Day Under Attack
A zero-day in a popular plugin for the Magento ecommerce platform is under attack. Attackers are using a few IP addresses to scan for vulnerable versions of Magmi, which is an open source database client that imports data into Magento. “We’ve seen a couple hundred requests for this specific attac...
Magmi (Magento Mass Importer) <= 0.7.21 Local File Disclosure Vulnerability
Magmi Magento Mass Importer is prone to a local file disclosure vulnerability. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
Magento 1.9.2 File Inclusion Vulnerability
Magento versions 1.9.2 and below suffer from an autoloaded file inclusion vulnerability. ------------------------------------------------------------------------------- Magento fault'datainvalid'; 113. 114. 115. $this-checkProductTypeExists$type; 116. $this-checkProductAttributeSet$set; 117. 118....