EDB-39838

functional

Magento < 2.0.6 - Arbitrary Unserialize / Arbitrary Write File

view exploit source exploit_dbverifiedtype webappsauthor agixpublished 2016-05-18catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-4010US	critical9.8	92.9% (100th)	Exploit	2017-01-23
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.