Skip to content
OpenAdvisories

Package · Packagist

dweeves/magmi

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2020-5776 Scanner template EPSS 15%

    Cross-Site Request Forgery in MAGMI

    Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

    dweeves/magmi Packagist
  • High —
    CVE-2014-8770 Public exploit

    MAGMI plugin for Magento Unsafe File Upload

    Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that conta…

    dweeves/magmi Packagist