Lucene search
Veracode Vulnerability DatabaseVERACODE:4800HistoryJul 30, 2017 - 5:37 a.m.
Cross-site Scripting (XSS)
2017-07-3005:37:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
50.8%
Magmi is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary webscript through the profile parameter of web/magmi.php or through query_string to web/magmi_import_run.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dweeves/magmi | le | 0.7.21 |
Related
nvd
nvd
CVE-2015-2068
2015-02-24 17:59:04
cvelist
cvelist
CVE-2015-2068
2015-02-24 17:00:00
github
github
MAGMI cross-site scripting (XSS)
2022-05-13 01:25:28
cve
cve
CVE-2015-2068
2015-02-24 17:59:04
osv
osv
MAGMI cross-site scripting (XSS)
2022-05-13 01:25:28
nuclei
nuclei
Magento Server Mass Importer - Cross-Site Scripting
2021-10-11 11:28:08
prion
prion
Cross site scripting
2015-02-24 17:59:00
openvas
openvas
Magmi (Magento Mass Importer) < 0.7.22 XSS / LFI Vulnerability
2015-02-06 00:00:00