CVE-2015-1397

POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

Magento-eCommerce-RCE-CVE-2015-1397

Magento Shoplift Exploit SUPEE-5344 - CVE-2015-1397 Overview This script exploits the CVE-2015-1397 vulnerability in Magento, commonly referred to as the Magento Shoplift exploit. It allows an attacker to create a new admin user in the Magento database by injecting SQL payloads. Originally writte...

CVE-2015-1397

This repository does not have a README...

CVE-2015-1397

creationtimestamp| type| source ---|---|--- 2016-08-23 13:20:51+00:00| seen| MISP/57b5892a-bfd8-49f1-8d6b-4a3d950d210f 2025-08-30 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhua7kpl2g 2026-09-29 11:23:44+00:00| seen|...

CVE-2015-1397

A SQL injection vulnerability exists in the getCsvFile function within the Mage_Adminhtml_Block_Widget_Grid class of Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 . The flaw is caused by a failure to properly sanitize user-supplied range inputs in the popularity para...

Magento eCommerce Web Sites SQL Injection (CVE-2015-1397)

An SQL injection vulnerability has been reported in Magento component. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...