CVE-2015-8707: Exposure of Sensitive Information to an Unauthorized Actor

Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field...

PT-2017-7468

Name of the Vulnerable Software and Affected Versions Magento CE versions prior to 1.9.2.2 Magento EE versions prior to 1.14.2.2 Description The issue allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field, as password reset tokens are...

CVE-2016-4010

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data...

PT-2017-8442

Name of the Vulnerable Software and Affected Versions Magento CE and EE versions prior to 2.0.6 Description The issue allows remote attackers to conduct PHP object injection attacks, enabling them to execute arbitrary PHP code. This is achieved by sending crafted serialized shopping cart data...

CVE-2016-4010: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data...

CVE-2015-1399

A PHP remote file inclusion vulnerability exists in the fetchView function within the Mage_Core_Block_Template_Zend class of Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 . The root cause is a lack of security mechanisms, allowing an authenticated administrator to ex...