Количество 2
Количество 2
CVE-2015-6497
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap.
GHSA-j4fq-3fm7-wh5v
Magento arbitrary PHP code execution via the productData parameter
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-6497 The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap. | CVSS3: 8.8 | 3% Низкий | больше 5 лет назад |
| GHSA-j4fq-3fm7-wh5v Magento arbitrary PHP code execution via the productData parameter | CVSS3: 8.8 | 3% Низкий | около 3 лет назад |
Уязвимостей на страницу