Lucene search
+L

6 matches found

NVD
NVD
•added 2021/02/25 2:15 p.m.•31 views

CVE-2021-21064

Magento UPWARD-php version 1.1.4 and earlier is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 and earlier due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which...

4.9CVSS0.08514EPSS
SaveExploits0References2
CVE
CVE
•added 2021/02/25 1:22 p.m.•73 views

CVE-2021-21064

CVE-2021-21064 affects Magento UPWARD-php (versions 1.1.4 and earlier) via the UPWARD Connector (versions 1.1.2 and earlier). The issue is a path traversal vulnerability caused by the upload feature that could let an attacker with admin console access upload a malicious YAML file and read arbitra...

4.9CVSS5.1AI score0.08514EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2021/02/25 1:22 p.m.•43 views

CVE-2021-21064 Magento UPWARD-php Path traversal vulnerability via UPWARD Connector

Magento UPWARD-php version 1.1.4 and earlier is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 and earlier due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which...

4.9CVSS5.4AI score0.08514EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/02/25 12:00 a.m.•22 views

Magento UPWARD-php Path Traversal Vulnerability

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides rights management, search engine and payment gateway and other functions. A security vulnerability exists in Magento UPWARD-php version 1.1.4, which can be exploited...

4.9CVSS5.8AI score0.08514EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/02/25 12:00 a.m.•5 views

PT-2021-14333

Name of the Vulnerable Software and Affected Versions: Magento UPWARD-php versions 1.1.4 and earlier Magento UPWARD Connector versions 1.1.2 and earlier Description: The issue is related to a Path traversal vulnerability due to the upload feature. An attacker could potentially exploit this...

4.9CVSS0.08514EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2021/02/22 11:00 p.m.•9 views

CVE-2021-21064

Magento UPWARD-php version 1.1.4 and earlier is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 and earlier due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which...

4.9CVSS5.7AI score0.08514EPSS
SaveExploits0References3
Rows per page
Query Builder