CVE-2016-4010 in Magento CE
요약 (영어)
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2016. 04. 13.
공개
2017. 01. 23.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 95829 | Magento CE/Magento EE 권한 상승 | 74 | 높음 | 공식 수정 | CVE-2016-4010 |