CVE-2015-2067

The MAGMI (Magento Mass Importer) plugin for Magento Server contains a directory traversal vulnerability in the web/ajax_pluginconf.php script. A remote attacker can exploit this by using .. (dot dot) sequences in the file parameter to read arbitrary files on the server, such as /etc/passwd. This...

CVE-2015-2067

Directory traversal vulnerability in web/ajaxpluginconf.php in the MAGMI aka Magento Mass Importer plugin for Magento Server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...