Lucene search
+L

13 matches found

Kitploit
Kitploit
•added 2026/10/06 1:45 a.m.•19 views

Magento-ver.-2.4.6

Título del exploit: FireBear Studio Improved Import & Export ver. 3.8.6 para Magento 2.4.6 - Inyección XSLT del lado del servidor Fecha: 2023-11-17 Autor del exploit: tmrswrr Página web del proveedor: FireBear Studio Enlace del software: FireBear Studio Improved Import & Export Versión: FireBear...

6.3AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-22744

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.01492EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:46 a.m.•11 views

CVE-2024-25413

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

9.1CVSS7.9AI score0.01492EPSS
SaveExploits1References1
OSV
OSV
•added 2024/02/16 2:15 a.m.•10 views

CVE-2024-25413

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

7.2CVSS6AI score0.01492EPSS
SaveExploits1References2
NVD
NVD
•added 2024/02/16 2:15 a.m.•15 views

CVE-2024-25413

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

9.1CVSS7.5AI score0.01492EPSS
SaveExploits1References2
Prion
Prion
•added 2024/02/16 2:15 a.m.•24 views

Design/Logic Flaw

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

8.4AI score0.01492EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/02/16 12:00 a.m.•25 views

CVE-2024-25413

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

7.8AI score0.01492EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/02/16 12:00 a.m.•6 views

CVE-2024-25413

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

8.1AI score0.01492EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/16 12:00 a.m.•3 views

CVE-2024-25413: XML Injection (aka Blind XPath Injection)

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...

7.2CVSS6.3AI score0.01492EPSS
SaveExploits1References3
CVE
CVE
•added 2024/02/16 12:00 a.m.•88 views

CVE-2024-25413

A XSLT Server Side injection vulnerability exists in the Import Jobs function of the FireBear Improved Import And Export plugin (v3.8.6) used with Adobe Commerce . This flaw allows an attacker to execute arbitrary commands by providing a crafted XSLT file . A proof-of-concept for this vulnerabili...

9.1CVSS7.8AI score0.01492EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/02/16 12:00 a.m.•16 views

Adobe Commerce Security Breach

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A security vulnerability exists in Adobe Commerce that stems from an XSLT server injection vulnerability in the Import Jobs function of the FireBear Improved Import And Export plugin...

9.1CVSS7.2AI score0.01492EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/02/15 12:00 a.m.•12 views

PT-2024-20928 · Unknown · Firebear Improved Import/Export

Name of the Vulnerable Software and Affected Versions: FireBear Improved Import And Export version 3.8.6 Description: A XSLT Server Side injection vulnerability in the Import Jobs function allows attackers to execute arbitrary commands via a crafted XSLT file. The vulnerability can be exploited b...

9.1CVSS8AI score0.01492EPSS
SaveExploits1References7
zdt
zdt
•added 2023/11/20 12:00 a.m.•523 views

FireBear Improved Import And Export 3.8.6 XSLT Server Side Injection Exploit

FireBear Improved Import and Export version 3.8.6 for Magento 2.4.6 suffers from an XSLT server-side injection vulnerability that allows for command execution. Exploit Title: FireBear Improved Import & Export ver. 3.8.6 for Magento 2.4.6 - XSLT Server Side Injection Command Execution Exploit...

8.1AI score
SaveExploits0
Rows per page
Query Builder