Skip to content
OpenAdvisories

Package · Packagist

dweeves/magmi

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2015-2067 Public exploit Scanner template EPSS 38%

    MAGMI plugin for Magento Server Directory Traversal

    Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

    dweeves/magmi Packagist
  • Medium —
    CVE-2015-2068 Public exploit Scanner template EPSS 14%

    MAGMI cross-site scripting (XSS)

    Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magm…

    dweeves/magmi Packagist
  • High —
    CVE-2014-8770 Public exploit

    MAGMI plugin for Magento Unsafe File Upload

    Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that conta…

    dweeves/magmi Packagist