CVE-2015-2067

Magento Server MAGMI (Magento Mass Importer) exposes a directory traversal vulnerability in web/ajax_pluginconf.php that allows remote attackers to read arbitrary files via a .. in the file parameter. The CVE-2015-2067 issue affects MAGMI plugins for Magento and has been documented with CVSS 2.0 ...

CVE-2015-2067

Directory traversal vulnerability in web/ajaxpluginconf.php in the MAGMI aka Magento Mass Importer plugin for Magento Server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...