CVE-2015-6497 Magento arbitrary PHP code execution via the productData parameter
HighCVSS 8.8
EPSS 7.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| magento/core(Packagist) | < 1.9.2.1 | 1.9.2.1 |
| magento | < 1.9.2.1 | 1.9.2.1 |
| magento | < 1.14.2.1 | 1.14.2.1 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- blog.mindedsecurity.com exploit third-party-advisory
- karmainsecurity.com exploit third-party-advisory
- magento.com vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- seclists.org exploit mailing-list third-party-advisory
- github.com