exploit/multi/http/magento_unserialize

weaponized

Magento 2.0.6 Unserialize Remote Code Execution

view exploit source metasploittype exploitpublished 2016-05-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-4010US	critical9.8	92.9% (100th)	Exploit	2017-01-23
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.