PT-2015-5266

Name of the Vulnerable Software and Affected Versions Magento Community Edition CE version 1.9.1.0 Magento Enterprise Edition EE version 1.14.1.0 Description A remote file inclusion issue exists in the fetchView function within the Mage Core Block Template Zend class, allowing remote administrato...

PT-2015-6239

Name of the Vulnerable Software and Affected Versions Magento Community Edition CE version 1.9.1.0 Magento Enterprise Edition EE version 1.14.1.0 Description The issue is related to the fetchView function in the Mage Core Block Template Zend class, which does not restrict the stream wrapper used ...