CVE-2014-8770
EPSS 13.2%MAGMI plugin for Magento Unsafe File Upload
發布日:2022/5/14修改日:2023/11/8
描述
Unrestricted file upload vulnerability in `magmi/web/magmi.php` in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file, then accessing the PHP file via a direct request to it in `magmi/plugins/`.
受影響套件(1)
- Packagist/dweeves/magmifrom 0, <= 0.7.17a